CVE:CVE-2015-6030
CNNVD:CNNVD-201510-350
HP ArcSight Logger、ArcSight Command Center和ArcSight Connector都是美国惠普（HP）公司的产品。HP ArcSight Logger是一套日志管理软件；ArcSight Command Center是一款用于监测数据的命令行中心产品；ArcSight Connector是一款用于自动收集和转换日志格式的连接器产品。
多款HP产品中存在安全漏洞，该漏洞源于程序使用root权限执行arcsight用户的文件。本地攻击者可借助arcsight账户访问权限利用该漏洞获取权限。以下产品及版本受到影响：HP ArcSight Logger 6.0.0.7307.1版本，ArcSight Command Center 6.8.0.1896.0版本，ArcSight Connector Appliance 6.4.0.6881.3版本。
solution:Upgrade hp arcsight_connector_appliance to a higher version than 6.4.0.6881.3,and avoid the version (,6.4.0.6881.3]; Upgrade hp arcsight_logger to a higher version than 6.0.0.7307.1,and avoid the version 6.0.0.7307.1; Upgrade hp arcsight_command_center to a higher version than 6.8.0.1896.0,and avoid the version 6.8.0.1896.0; Upgrade hp arcsight_connectors to a higher version than 7.1.3,and avoid the version (,7.1.3]; Upgrade hp arcsight_express to a higher version than 4.0,4.0:p1,and avoid the version 4.0,4.0:p1; Upgrade hp arcsight_management_center to a higher version than *:p1,and avoid the version *:p1; Upgrade microfocus arcsight_enterprise_security_manager to a higher version than 6.5,and avoid the version (,6.5]