CVE-2018-6505: MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability
Published Sep 20, 2018
·Updated
A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads.
Affected Software
1 affected component
HP Arcsight Management Center<2.81
Event History
Sep 20, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-6505?
CVE-2018-6505 has a high severity rating due to the potential for unauthenticated file downloads.
2
How do I fix CVE-2018-6505?
To fix CVE-2018-6505, upgrade to ArcSight Management Center version 2.81 or later.
3
What versions of ArcSight Management Center are affected by CVE-2018-6505?
All versions of ArcSight Management Center prior to 2.81 are affected by CVE-2018-6505.
4
Can CVE-2018-6505 be exploited remotely?
Yes, CVE-2018-6505 can be exploited remotely as it allows unauthenticated file downloads.
5
Is authentication required to exploit CVE-2018-6505?
No, authentication is not required to exploit CVE-2018-6505.