Unscored CVE-2015-4543 EUVD-2015-4563GHSA-m8m6-72r2-h6p7

EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated use…

Published Sep 25, 2015 · Updated Aug 6, 2024 · Assigned by dell

Description

EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.

References

http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html
20150923 ESA-2015-142: RSA Archer GRC Platform Multiple Vulnerabilities mailing-list
1033649 vdb-entry