CVEvulnerability

CVE-2012-2292

7.5 HIGH Published 2013-02-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Affected configurations

• emc rsa archer smartsuite 4.3 • emc rsa archer smartsuite 4.5 • emc rsa archer egrc 5.0 • emc rsa archer egrc 5.1 • emc rsa archer egrc 5.2

Related

Weakness · not in database (1)

Referenced by CWE · observed example (2)

  • CWE-923 Improper Restriction of Communication Channel to Intended Endpoints weakness
  • CWE-942 Permissive Cross-domain Security Policy with Untrusted Domains weakness

References