CVE-2012-2293

Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path.

Score

CVSS 2.0 6.5 Medium

Status

Modified - security_alert@emc.com

Published

2013-02-06

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Rsa Archer Egrc (Emc)
• Rsa Archer Smartsuite (Emc)

References

• http://archives.neohapsis.com/archives/bugtraq/2013-02/0001.html