CVE-2015-4542

Published: Sep 26, 2015Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors.

Affected (3)

Products: Emc: Rsa Archer Grc

Emc

1 product

Rsa Archer Grc

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Emc Rsa Archer Grc	Version 5.5.0
Emc Rsa Archer Grc	Version 5.5.1
Emc Rsa Archer Grc	Version 5.5.2

Related CWEs

CWE-264

References (6)

http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://seclists.org/bugtraq/2015/Sep/105

Source: security_alert@emc.com

Third Party Advisory

http://www.securitytracker.com/id/1033649

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://seclists.org/bugtraq/2015/Sep/105

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securitytracker.com/id/1033649

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.