CVEvulnerability
CVE-2015-4542
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-09-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors.
Affected configurations
• emc rsa archer grc 5.5.0
• emc rsa archer grc 5.5.1
• emc rsa archer grc 5.5.2
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Sep/105 Third Party Advisory
- http://www.securitytracker.com/id/1033649 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Sep/105 Third Party Advisory
- http://www.securitytracker.com/id/1033649 Third Party Advisory, VDB Entry