Archer Grc Platform

RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed password to use it in further attacks.

Published: 2019-03-13T22:00:00.000Z
Updated: 2024-09-16T22:39:54.202Z

RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.

Published: 2019-03-13T22:00:00.000Z
Updated: 2024-09-16T18:43:54.780Z

RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information.

Published: 2019-01-03T21:00:00.000Z
Updated: 2024-09-17T03:37:26.681Z

RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA Archer Help pages. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.

Published: 2017-10-11T19:00:00.000Z
Updated: 2024-08-05T19:27:40.377Z

RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the request URL. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.

Published: 2017-10-11T19:00:00.000Z
Updated: 2024-08-05T19:27:40.481Z