Description
RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to upload malicious files via attachments to arbitrary paths on the web server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | RSA Archer GRC Platform prior to 6.2.0.5 | RSA Archer GRC Platform prior to 6.2.0.5 | — |
References
- 101195 vdb-entry
- 1039518 vdb-entry
- http://seclists.org/fulldisclosure/2017/Oct/12