Описание
HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.
Ссылки
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hp:arcsight_logger:6.0.0.7307.1:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.15828
Средний
5 Medium
CVSS2
Дефекты
CWE-254
Связанные уязвимости
github
больше 3 лет назад
HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.
EPSS
Процентиль: 95%
0.15828
Средний
5 Medium
CVSS2
Дефекты
CWE-254