Multiple HP Products CVE-2012-5198 Unspecified Information Disclosure Vulnerability

Bugtraq ID:	57976
Class:	Unknown
CVE:	CVE-2012-5198
Remote:	Yes
Local:	No
Published:	Feb 14 2013 12:00AM
Updated:	Feb 14 2013 12:00AM
Credit:	Shawn Asmus of Fishnet Security
Vulnerable:	HP Arcsight Logger 5.2 HP Arcsight Connector Appliance 6.3
Not Vulnerable:	HP Arcsight Logger 5.3 HP Arcsight Connector Appliance 6.4

Multiple HP Products CVE-2012-5198 Unspecified Information Disclosure Vulnerability

HP ArcSight Connector Appliance and ArcSight Logger are prone to an unspecified information-disclosure vulnerability.

Remote attackers can exploit this issue to gain access to sensitive information that may aid in further attacks.

The following products are affected:

HP ArcSight Connector Appliance versions 6.3 and prior
HP Arcsight Logger versions 5.2 and prior

Multiple HP Products CVE-2012-5198 Unspecified Information Disclosure Vulnerability

References:

• HP Homepage (HP)
  
• HPSBMU02836 SSRT101056 rev.1 - HP ArcSight Connector Appliance and ArcSight Logg (HP)