CVE-2015-6030 : HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access.

Published 2015-11-04 03:59:08

Updated 2018-10-17 18:44:56

Source CERT/CC

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2015-6030

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-6030

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2015-6030

http://www.securitytracker.com/id/1034072

HP ArcSight SmartConnectors Unsafe File Permissions Let Local Users Gain Elevated Privileges - SecurityTracker
Third Party Advisory;VDB Entry
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04872416

HPSBGN03430 rev.3 - HP ArcSight products, Local Elevation of Privilege
Third Party Advisory
http://www.securitytracker.com/id/1034073

HP ArcSight Enterprise Security Manager Unsafe File Permissions Let Local Users Gain Elevated Privileges - SecurityTracker
Third Party Advisory;VDB Entry
http://www.kb.cert.org/vuls/id/842252

VU#842252 - HP ArcSight Logger contains multiple vulnerabilities
Third Party Advisory;US Government Resource

CVEs referencing this url

Products affected by CVE-2015-6030

HP » Arcsight Connector Appliance
Versions up to, including, (<=) 6.4.0.6881.3
cpe:2.3:a:hp:arcsight_connector_appliance:*:*:*:*:*:*:*:*
Matching versions
HP » Arcsight Logger » Version: 6.0.0.7307.1
cpe:2.3:a:hp:arcsight_logger:6.0.0.7307.1:*:*:*:*:*:*:*
Matching versions
HP » Arcsight Command Center » Version: 6.8.0.1896.0
cpe:2.3:a:hp:arcsight_command_center:6.8.0.1896.0:*:*:*:*:*:*:*
Matching versions
HP » Arcsight Express » Version: 4.0
cpe:2.3:a:hp:arcsight_express:4.0:*:*:*:*:*:*:*
Matching versions
HP » Arcsight Express » Version: 4.0 Update P1
cpe:2.3:a:hp:arcsight_express:4.0:p1:*:*:*:*:*:*
Matching versions
HP » Arcsight Connectors
Versions up to, including, (<=) 7.1.3
cpe:2.3:a:hp:arcsight_connectors:*:*:*:*:*:*:*:*
Matching versions
HP » Arcsight Management Center » Update P1
Versions up to, including, (<=) 2.0
cpe:2.3:a:hp:arcsight_management_center:*:p1:*:*:*:*:*:*
Matching versions
Microfocus » Arcsight Enterprise Security Manager
Versions up to, including, (<=) 6.5
cpe:2.3:a:microfocus:arcsight_enterprise_security_manager:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2015-6030

Exploit prediction scoring system (EPSS) score for CVE-2015-6030

CVSS scores for CVE-2015-6030

CWE ids for CVE-2015-6030

References for CVE-2015-6030

Products affected by CVE-2015-6030