CVE-2018-6500: MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
Published Sep 20, 2018
·Updated
A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.
Affected Software
1 affected component
HP Arcsight Management Center<2.81
Event History
Sep 19, 2018
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-6500?
CVE-2018-6500 is considered a high severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2018-6500?
To fix CVE-2018-6500, upgrade to ArcSight Management Center version 2.81 or later.
3
What does CVE-2018-6500 exploit?
CVE-2018-6500 exploits a Directory Traversal vulnerability in ArcSight Management Center.
4
Which versions are affected by CVE-2018-6500?
All versions of ArcSight Management Center prior to version 2.81 are affected by CVE-2018-6500.
5
Can CVE-2018-6500 be exploited remotely?
Yes, CVE-2018-6500 can potentially be exploited remotely.