CVE-2019-3482

2019-03-25 18:29:00 2019-03-25 19:45:07

Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

COMPLETE

Integrity

NONE

Availability

NONE

HP ArcSight Logger 5.2 HP ArcSight Logger 5.3 HP ArcSight Logger 6.0 Hp Arcsight logger 6.0.0.7307.1 (not an official CPE) Hp Arcsight logger 6.1 (not an official CPE)

Hp - Arcsight logger

Advisory	Patch	Confirmed	Link
			https://softwaresupport.softwaregrp.com/doc/KM03355866

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (ID 22)

Related CAPEC 7 Relative Path Traversal (CAPEC-ID 139) Directory Traversal (CAPEC-ID 213) File System Function Injection, Content Based (CAPEC-ID 23) Using Slashes and URL Encoding Combined to Bypass Validation Logic (CAPEC-ID 64) Manipulating Input to File System Calls (CAPEC-ID 76) Using Escaped Slashes in Alternate Encoding (CAPEC-ID 78) Using Slashes in Alternate Encoding (CAPEC-ID 79)