HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Arcsight_enterprise_security_manager | Microfocus | * | 5.6 (including) |
| Arcsight_enterprise_security_manager | Microfocus | 6.0 (including) | 6.0 (including) |
| Arcsight_enterprise_security_manager | Microfocus | 6.5 (including) | 6.5 (including) |
| Arcsight_enterprise_security_manager | Microfocus | 6.8 (including) | 6.8 (including) |
| Arcsight_enterprise_security_manager | Microfocus | 6.9 (including) | 6.9 (including) |