CVE-2017-8025

Опубликовано: 11 окт. 2017

Источник: nvd

CVSS3: 7.4

CVSS2: 6.8

EPSS Низкий

Описание

RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to upload malicious files via attachments to arbitrary paths on the web server.

Ссылки

http://seclists.org/fulldisclosure/2017/Oct/12
Mailing List
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/101195
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039518
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2017/Oct/12
Mailing List
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/101195
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039518
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:emc:archer_grc_platform:*:*:*:*:*:*:*:*

Версия до 6.2.0.4 (включая)

EPSS

Процентиль: 73%

0.00761

Низкий

7.4 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-wcgr-j26q-j337