Lucene search

K
cve[email protected]CVE-2013-0932
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-0932

2022-10-0316:15:03
CWE-264
web.nvd.nist.gov
16
emc rsa archer
grc
smart suite framework
remote access bypass
file upload
security vulnerability
cve-2013-0932

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.0%

EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors.

Affected configurations

NVD
Node
emcrsa_archer_egrcMatch5.0
OR
emcrsa_archer_egrcMatch5.1
OR
emcrsa_archer_egrcMatch5.2
OR
emcrsa_archer_egrcMatch5.3
Node
emcrsa_archer_smartsuiteMatch4.3
OR
emcrsa_archer_smartsuiteMatch4.5

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.0%

Related for CVE-2013-0932