Access to root accounts on some ArcSight boxes only involve challenge-response codes that we were supposed to get from HPE support. Because of how annoying this

Access to root accounts on some ArcSight boxes only involve challenge-response codes that we were supposed to get from HPE support. Because of how annoying this was, a clever ArcSight colleague of mine was able to create a simple Java program we would run to get the response code ourselves, saving us lots of time. Not sure exactly how he did it, but it only took him a weekend. Source code or not, some ArcSight servers were already very vulnerable. Whether or not that was done on purpose, who knows.