CVE-2011-2779 Information

Description

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files which allows local users to change or delete log data by modifying a file a different vulnerability than CVE-2011-0770.

Reference

http://www.kb.cert.org/vuls/id/122054 https://exchange.xforce.ibmcloud.com/vulnerabilities/68855

Share on: