CVE-2011-2779
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:arcsight_c1000_appliance
- hp:arcsight_c1300_appliance
- hp:arcsight_c3200_appliance
- hp:arcsight_c3400_appliance
- hp:arcsight_c5200_appliance
- hp:arcsight_c5400_appliance
- hp:windows_event_log_smartconnector