mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-29 05:56:17 +00:00
128 lines
4.1 KiB
JSON
128 lines
4.1 KiB
JSON
{
|
|
"id": "CVE-2011-2779",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2011-07-19T21:55:00.790",
|
|
"lastModified": "2024-11-21T01:28:57.740",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Windows Event Log SmartConnector en HP ArcSight Conector Appliance anteriores a v6.1 utiliza permisos de escritura para los archivos de informe exportados, lo que permite a usuarios locales modificar o borrar datos de registro mediante la modificaci\u00f3n de un archivo, una vulnerabilidad diferente a CVE-2011-0770."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
|
|
"baseScore": 3.6,
|
|
"accessVector": "LOCAL",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL"
|
|
},
|
|
"baseSeverity": "LOW",
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 4.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-264"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:hp:windows_event_log_smartconnector:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "6.0.0.60023.2",
|
|
"matchCriteriaId": "3D8340CA-3B24-4711-B85A-38F73F0DB5A6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:h:hp:arcsight_c1000_appliance:*:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A2ED4F23-4DDE-4D2A-932D-83FD93E86CCD"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:h:hp:arcsight_c1300_appliance:*:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3D9DFBB3-7E4A-40EC-8943-5D6D9489DE42"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:h:hp:arcsight_c3200_appliance:*:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "53379096-4B4E-4F86-8BE8-DAA902F4D5F2"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:h:hp:arcsight_c3400_appliance:*:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7FB0EE4D-5E80-4625-893B-5C53E692337F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:h:hp:arcsight_c5200_appliance:*:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D9865427-52CA-4B0F-AFDE-EAE9C46D0AAA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:h:hp:arcsight_c5400_appliance:*:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D02D9B67-9E0A-4B2A-A880-09DCA9622E85"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://www.kb.cert.org/vuls/id/122054",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"US Government Resource"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68855",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.kb.cert.org/vuls/id/122054",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"US Government Resource"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68855",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |