Vulnerability in HP Arcsight Logger

CVE-2015-6029

HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.

EPSS: 0.044 (90.4th percentile) — read the EPSS interpretation.

Affected products

Hp Arcsight_logger — versions 6.0.0.7307.1
N/a — versions n/a

Weakness classification (CWE)

CWE-254

References

cret@cert.org (vdb-entry, x_refsource_BID)
cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)