low3.6
CVE-2011-2779
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local us…
Impact
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Windows Event Log Smartconnector | through 6.0.0.60023.2 |
| Hp | Arcsight C1000 Appliance | All versions |
| Hp | Arcsight C1300 Appliance | All versions |
| Hp | Arcsight C3200 Appliance | All versions |
| Hp | Arcsight C3400 Appliance | All versions |
| Hp | Arcsight C5200 Appliance | All versions |
| Hp | Arcsight C5400 Appliance | All versions |