CVE-2015-4542

Опубликовано: 26 сент. 2015

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors.

Ссылки

http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html
Third Party Advisory
VDB Entry
http://seclists.org/bugtraq/2015/Sep/105
Third Party Advisory
http://www.securitytracker.com/id/1033649
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html
Third Party Advisory
VDB Entry
http://seclists.org/bugtraq/2015/Sep/105
Third Party Advisory
http://www.securitytracker.com/id/1033649
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:rsa_archer_grc:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:emc:rsa_archer_grc:5.5.1:*:*:*:*:*:*:*

cpe:2.3:a:emc:rsa_archer_grc:5.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00137

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-w65r-j48x-2jqp

github

больше 3 лет назад