ESA-2015-142: RSA Archer® GRC Platform Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-142: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2015-142 CVE Identifier: CVE-2015-4541, CVE-2015-4542, CVE-2015-4543 Severity Rating: CVSS v2 Base Score: View details below for individual CVSS v2 scores Affected...

CVE-2015-4543

EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields...

CVE-2015-4543

RSA Archer GRC Platform 5.x prior to 5.5.3 stores passwords in cleartext in the database under certain circumstances, enabling authenticated read access to expose credentials. Affected product: RSA Archer GRC (5.x). Root cause: plaintext password storage in unspecified conditions. Impact: potenti...