CVE-2015-4543

EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.

Score

CVSS 2.0 4.0 Medium

Status

Modified - security_alert@emc.com

Published

2015-09-26

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Rsa Archer Grc (Emc)

References

• http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html
• http://seclists.org/bugtraq/2015/Sep/105
• http://www.securitytracker.com/id/1033649