First published: Sat Feb 16 2013(Updated: )
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors.
Credit: hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP ArcSight Connector Appliance Firmware | <=6.3 | |
HP ArcSight Connector Appliance Firmware | =6.0.0.60023.2 | |
HP ArcSight Connector Appliance Firmware | =6.2.0.6244.0 | |
HP ArcSight Connector Appliance Firmware | =c1400 | |
HP ArcSight Connector Appliance Firmware | =c3400 | |
HP ArcSight Connector Appliance Firmware | =c5400 | |
OpenText ArcSight Logger | <=5.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-5199 has been classified as a critical vulnerability due to its potential for remote code execution.
To remediate CVE-2012-5199, upgrade to the latest version of the HP ArcSight Connector Appliance or ArcSight Logger as specified in official HP advisories.
CVE-2012-5199 affects HP ArcSight Connector Appliance versions 6.3 and earlier, as well as ArcSight Logger 5.2 and earlier.
Yes, CVE-2012-5199 can be exploited by remote authenticated users to execute arbitrary code.
There are no known effective workarounds for CVE-2012-5199 other than applying the security updates provided by HP.