CVE-2017-13987 | BDVDB-2026-91048 Detail

Description#

An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to download log files.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://softwaresupport.hpe.com/km/KM02944672
http://www.securityfocus.com/bid/100935

Exploit#

No public exploit known

History#

Version 12017-09-29Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.