CVE-2015-6029 in Arcsight Logger
Summary
HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
08/14/2015
Disclosure
11/03/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 78548 | HP Arcsight Logger Lockout 7pk security | 254 | Unproven | Official fix | CVE-2015-6029 |