ESA-2013-057: RSA Archer(r) GRC Multiple Vulnerabilities

ESA-2013-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-057: RSA Archer® GRC Multiple Vulnerabilities EMC Identifier: ESA-2013-057 CVE Identifier: CVE-2013-3276, CVE-2013-3277 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected Products: RSA Archer versio...

CVE-2013-3277

Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-3277

RSA Archer GRC 5.x (pre-5.4) contains an open redirect vulnerability (CVE-2013-3277) that could enable phishing by redirecting users to arbitrary sites. The issue affects EMC RSA Archer GRC platform versions prior to 5.4; downgrade is not indicated. The public advisory ESA-2013-057 notes this vul...