Home  >  CVE-2015-6029
CVE Details for CVE: CVE-2015-6029
Summary
HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.
Timestamps
Last major update 28-11-2016 - 19:38
Published 04-11-2015 - 03:59
Last modified 28-11-2016 - 19:38
References
Vulnerable Configurations
  • cpe:2.3:a:hp:arcsight_logger:6.0.0.7307.1:*:*:*:*:*:*:*
    cpe:2.3:a:hp:arcsight_logger:6.0.0.7307.1:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
CWE-254
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 77128
cert-vn VU#842252
confirm https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04863612