CVE-2018-6504 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Cross-Site Request Forgery CSRF vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery CSRF...

CVE-2018-6504

ArcSight Management Center (ArcMC) is affected by a CSRF vulnerability in all versions prior to 2.81. The CVE-2018-6504 entry is supported by multiple connected sources (CNVD; CVE/CVELIST records) confirming CSRF, with no explicit exploit details or remediation steps provided in the supplied docu...