CVE-2015-4543

EPSS 0.46%
Published 26.09.2015 01:59:05
Last modified 12.04.2025 10:46:40
Source security_alert@emc.com
Teams watchlist Login
Open Login

EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Emc ≫ Rsa Archer Grc Version5.5.0

Emc ≫ Rsa Archer Grc Version5.5.1

Emc ≫ Rsa Archer Grc Version5.5.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.46%	0.629

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html

Third Party Advisory

VDB Entry

http://seclists.org/bugtraq/2015/Sep/105

Third Party Advisory

http://www.securitytracker.com/id/1033649

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-4543

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-4543

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-4543

EUVD