ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities

ESA-2014-071.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2014-071 CVE Identifier: CVE-2014-2517, CVE-2014-2505, CVE-2014-0640, CVE-2014-0641 Severity Rating: CVSS v2 Base Score: See below for individual scor...

CVE-2014-0640

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors...

CVE-2014-0640

CVE-2014-0640 affects EMC RSA Archer GRC Platform 5.x, prior to 5.5 SP1, where remote authenticated users can bypass resource-access restrictions via unspecified vectors. The RSA advisory ESA-2014-071 confirms this vulnerability within the 5.5 SP1 fixes bundle for RSA Archer GRC Platform 5.x. Imp...