Skip to content
OpenAdvisories
High · 7.5 CVE-2018-6500 EUVD-2018-18256GHSA-wjm3-wvjm-6343

MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

Published Sep 20, 2018 · Updated Sep 16, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: ArcSight Management Center

Description

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.

Affected products

VendorProductAffectedFixed
Micro Focus ArcSight Management Center all versions prior to 2.81 —

References