Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

ArcSight Logger before 6.7 can run attacker code

CVE-2019-3479 · published 7 years ago
Summary

Versions of ArcSight Logger older than 6.7 may allow a remote user to make the system execute their own code. This could let an attacker take control of the logging server or disrupt its operation. Update the software to version 6.7 or later to close the risk.

What to do
  • Update hp arcsight_logger to version 6.7 or later.
Affected software
VendorProductAffected versions
hp arcsight_logger < 6.7
cpe:2.3:a:hp:arcsight_logger:*:*:*:*:*:*:*:*
Original advisory text
Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
7% chance of attack within 30 days
Timeline
Published25 Mar 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-3479 · NVD
Track software like this
Free during beta