CVE-2015-4543

RSA Archer GRC Platform 5.x prior to 5.5.3 stores passwords in cleartext in the database under certain circumstances, enabling authenticated read access to expose credentials. Affected product: RSA Archer GRC (5.x). Root cause: plaintext password storage in unspecified conditions. Impact: potenti...

CVE-2015-4541

EMC RSA Archer GRC 5.x suffers multiple stored XSS vulnerabilities in versions prior to 5.5.3. The issues allow remote authenticated users to inject arbitrary script/HTML in the user’s browser, via unspecified vectors, potentially impacting session security. RSA ESA-2015-142 confirms fixed in 5.5...

CVE-2015-4542

RSA Archer GRC Platform 5.x prior to 5.5.3 contains an improper authorization vulnerability that allows an authenticated user to bypass access controls and read or modify messages in the Discussion Forum Fields. The issue stems from authorization checks, enabling privilege escalation within the w...