Unscored severity · published Sep 26, 2015
CVE-2015-4543
EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by…
–
CVSS
2.3%
EPSS
No
On KEV
Description
EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Rsa Archer Grc · Emc
5.5.0; 5.5.1; 5.5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4543
Third Party Advisory
http://packetstormsecurity.com/files/133682/RSA-Archer-GRC-5.5.3-XSS-Improper-Authorization-Information-Disclosure.html
Third Party Advisory
http://seclists.org/bugtraq/2015/Sep/105
Third Party Advisory
http://www.securitytracker.com/id/1033649
More from Rsa Archer Grc
–
CVE-2015-4542
EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified…
–
CVE-2015-4541
Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer GRC 5.x before 5.5.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified…