ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities

ESA-2014-071.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2014-071 CVE Identifier: CVE-2014-2517, CVE-2014-2505, CVE-2014-0640, CVE-2014-0641 Severity Rating: CVSS v2 Base Score: See below for individual scor...

CVE-2014-2517

Summary: CVE-2014-2517 is a privilege escalation vulnerability affecting EMC RSA Archer GRC Platform 5.x. Connected advisory ESA-2014-071 confirms a vulnerability in RSA Archer GRC Platform 5.5 SP1 timeframe where malicious non-privileged users could perform unauthorized operations within the app...

CVE-2014-2517

Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...