CVE:CVE-2011-2779
CNNVD:CNNVD-201107-228
HP ArcSight Connector Appliance 6.1之前版本中的Windows Event Log SmartConnector对输出报表文件使用全域可写权限。本地用户可通过修改文件更改或删除日志数据。
solution:Upgrade hp windows_event_log_smartconnector to a higher version than 6.0.0.60023.2,and avoid the version (,6.0.0.60023.2]; Upgrade hp arcsight_c1000_appliance to a higher version than *; Upgrade hp arcsight_c1300_appliance to a higher version than *; Upgrade hp arcsight_c3200_appliance to a higher version than *; Upgrade hp arcsight_c3400_appliance to a higher version than *; Upgrade hp arcsight_c5200_appliance to a higher version than *; Upgrade hp arcsight_c5400_appliance to a higher version than *