Vigil@nce - HP ArcSight Logger: incoherent complex searches
August 2015 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An HP ArcSight Logger administrator, who searches traces of a
sensitive event, may miss this event.
Impacted products: ArcSight Logger.
Severity: 1/4.
Creation date: 31/07/2015.
DESCRIPTION OF THE VULNERABILITY
The HP ArcSight Logger product is used to store and read event
logs.
However, search features contain several errors. Results are thus
inconsistent.
An HP ArcSight Logger administrator, who searches traces of a
sensitive event, may therefore miss this event.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/HP-ArcSight-Logger-incoherent-complex-searches-17554