cvelist/2018/6xxx/CVE-2018-6501.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "security@microfocus.com",
      "DATE_PUBLIC" : "2018-09-19T15:35:00.000Z",
      "ID" : "CVE-2018-6501",
      "STATE" : "PUBLIC",
      "TITLE" : "MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "ArcSight Management Center",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "all versions prior to 2.81"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "Micro Focus"
            }
         ]
      }
   },
   "credit" : [
      {
         "lang" : "eng",
         "value" : "Micro Focus would like to thank Andy Tan for reporting the Insufficient Access Control, Access Control Vulnerability, Reflected Cross Site Scripting, Cross-Site Request Forgery (CSRF), and Unauthenticated File Download vulnerabilities to cyber-psrt@microfocus.com.\n"
      }
   ],
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls."
         }
      ]
   },
   "exploit" : [
      {
         "lang" : "eng",
         "value" : "Insufficient Access Controls"
      }
   ],
   "impact" : {
      "cvss" : {
         "attackComplexity" : "LOW",
         "attackVector" : "NETWORK",
         "availabilityImpact" : "NONE",
         "baseScore" : 4.3,
         "baseSeverity" : "MEDIUM",
         "confidentialityImpact" : "NONE",
         "integrityImpact" : "LOW",
         "privilegesRequired" : "LOW",
         "scope" : "UNCHANGED",
         "userInteraction" : "NONE",
         "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
         "version" : "3.0"
      }
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "Insufficient Access Controls"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142",
            "refsource" : "CONFIRM",
            "url" : "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03245142"
         }
      ]
   },
   "source" : {
      "discovery" : "UNKNOWN"
   }
}