What’s Vulnerable › Vulnerabilities

CVE-2011-2779

• Severity: low (CVSS 3.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-07-19 · updated 2026-06-16
• Weakness: CWE-264

Description

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.

Affected products

• HP Arcsight C1000 Appliance: all versions
• HP Arcsight C1300 Appliance: all versions
• HP Arcsight C3200 Appliance: all versions
• HP Arcsight C3400 Appliance: all versions
• HP Arcsight C5200 Appliance: all versions
• HP Arcsight C5400 Appliance: all versions
• HP Windows Event Log Smartconnector: through 6.0.0.60023.2

References

• http://www.kb.cert.org/vuls/id/122054
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68855
• http://www.kb.cert.org/vuls/id/122054
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68855

Get alerted when CVE-2011-2779 or the next vulnerability affects your stack