Description
EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.
Unscored
CVE-2016-0899
EUVD-2016-0910GHSA-3p5p-wf36-fw98
EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential …
Published Jul 4, 2016 · Updated Aug 5, 2024 · Assigned by dell