CVEvulnerability
CVE-2015-4543
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-09-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.
Affected configurations
• emc rsa archer grc 5.5.0
• emc rsa archer grc 5.5.1
• emc rsa archer grc 5.5.2
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Sep/105 Third Party Advisory
- http://www.securitytracker.com/id/1033649 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html Third Party Advisory, VDB Entry
- http://seclists.org/bugtraq/2015/Sep/105 Third Party Advisory
- http://www.securitytracker.com/id/1033649 Third Party Advisory, VDB Entry