Information disclosure in HP Arcsight Logger

CVE-2015-2136

HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.

Affected products

Hp Arcsight_logger
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

hp-security-alert@hp.com (x_refsource_CONFIRM, Vendor Advisory)