CVE-2015-4543

Опубликовано: 26 сент. 2015

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.

Ссылки

http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html
Third Party Advisory
VDB Entry
http://seclists.org/bugtraq/2015/Sep/105
Third Party Advisory
http://www.securitytracker.com/id/1033649
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html
Third Party Advisory
VDB Entry
http://seclists.org/bugtraq/2015/Sep/105
Third Party Advisory
http://www.securitytracker.com/id/1033649
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:rsa_archer_grc:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:emc:rsa_archer_grc:5.5.1:*:*:*:*:*:*:*

cpe:2.3:a:emc:rsa_archer_grc:5.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00456

Низкий

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-m8m6-72r2-h6p7

github

больше 3 лет назад