CVE-2015-6029: Medium severity opentext arcsight logger vulnerability
Published Nov 4, 2015
·Updated
HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.
Affected Software
1 affected component
HP ArcSight Logger=6.0.0.7307.1
Event History
Nov 4, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6029?
CVE-2015-6029 is considered a medium severity vulnerability due to the potential for brute-force attacks on the SOAP interface.
2
How do I fix CVE-2015-6029?
To fix CVE-2015-6029, upgrade to HP ArcSight Logger version 6.0 P2 or later, which includes mitigations for this vulnerability.
3
What potential risks does CVE-2015-6029 pose?
CVE-2015-6029 poses the risk of unauthorized remote access through brute-force authentication attempts.
4
Is CVE-2015-6029 exploitable over the internet?
Yes, CVE-2015-6029 can be exploited over the internet if the SOAP interface is exposed and accessible.
5
What type of authentication is affected by CVE-2015-6029?
CVE-2015-6029 affects the authentication mechanism of the SOAP interface within HP ArcSight Logger.