Description
HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force approach.
References
- 77128 vdb-entry
- https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04863612
- VU#842252 third-party-advisory