CVE-2017-13987: Medium severity hp enterprise security manager vulnerability
Published Sep 29, 2017
·Updated
An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to download log files.
Affected Software
28 affected components
HP Arcsight Enterprise Security Manager=6.0
HP Arcsight Enterprise Security Manager=6.0c
HP Arcsight Enterprise Security Manager=6.5
HP Arcsight Enterprise Security Manager=6.5-sp1
HP Arcsight Enterprise Security Manager=6.5c
HP Arcsight Enterprise Security Manager=6.5c-sp1
HP Arcsight Enterprise Security Manager=6.8
HP Arcsight Enterprise Security Manager=6.8c
HP Arcsight Enterprise Security Manager=6.9.0c
HP Arcsight Enterprise Security Manager=6.9.1c
HP Arcsight Enterprise Security Manager=6.9.1c-p1
HP Arcsight Enterprise Security Manager=6.9.1c-p2
HP Arcsight Enterprise Security Manager=6.9.1c-p3
HP Arcsight Enterprise Security Manager=6.11.0
HP Arcsight Enterprise Security Manager Express=6.0
HP Arcsight Enterprise Security Manager Express=6.0c
HP Arcsight Enterprise Security Manager Express=6.5
HP Arcsight Enterprise Security Manager Express=6.5-sp1
HP Arcsight Enterprise Security Manager Express=6.5c
HP Arcsight Enterprise Security Manager Express=6.5c-sp1
HP Arcsight Enterprise Security Manager Express=6.8
HP Arcsight Enterprise Security Manager Express=6.8c
HP Arcsight Enterprise Security Manager Express=6.9.0
HP Arcsight Enterprise Security Manager Express=6.9.1c
HP Arcsight Enterprise Security Manager Express=6.9.1c-p1
HP Arcsight Enterprise Security Manager Express=6.9.1c-p2
HP Arcsight Enterprise Security Manager Express=6.9.1c-p3
HP Arcsight Enterprise Security Manager Express=6.11.0
Event History
Sep 29, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-13987?
The severity of CVE-2017-13987 is considered medium as it allows unauthorized users to access log files.
2
How do I fix CVE-2017-13987?
To fix CVE-2017-13987, upgrade to ArcSight ESM or ESM Express version 6.9.1c Patch 4 or 6.11.0 Patch 1.
3
What software versions are affected by CVE-2017-13987?
CVE-2017-13987 affects ArcSight ESM and ESM Express versions prior to 6.9.1c Patch 4 and 6.11.0 Patch 1.
4
Can CVE-2017-13987 be exploited remotely?
Yes, CVE-2017-13987 can be exploited remotely since it involves unauthorized access to downloadable log files.
5
Is there a workaround for CVE-2017-13987 while waiting for a patch?
There is no officially documented workaround for CVE-2017-13987, so upgrading to a patched version is recommended.