Skip to content
OpenAdvisories
Unscored CVE-2017-13987 EUVD-2017-5502GHSA-g9xc-g4c8-7qx2

An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Pa…

Published Sep 29, 2017 · Updated Aug 5, 2024 · Assigned by microfocus

Description

An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an unauthorized user to download log files.

References