RSA Archer GRC CMS Multiple Security Vulnerabilities

Bugtraq ID:	101195
Class:	Unknown
CVE:	CVE-2017-14369 CVE-2017-14371 CVE-2017-14372 CVE-2017-8025 CVE-2017-14370 CVE-2017-8016
Remote:	Yes
Local:	No
Published:	Oct 06 2017 12:00AM
Updated:	Oct 18 2017 08:03PM
Credit:	Erlend Leiknes, Security Consultant with Mnemonic AS, Mohit Rawat.
Vulnerable:	EMC RSA Archer GRC 5.5.2 EMC RSA Archer GRC 6.2.0.5 EMC RSA Archer GRC 6.2.0.2 EMC RSA Archer GRC 5.5.3.4 EMC RSA Archer GRC 5.5.3.1 EMC RSA Archer GRC 5.5.2.3 EMC RSA Archer GRC 5.5.1.3.1 EMC RSA Archer GRC 5.5.1.1 EMC RSA Archer GRC 5.5 SP1 P3 EMC RSA Archer GRC 5.5 SP1 EMC RSA Archer GRC 5.5 EMC RSA Archer GRC 5.4.1.3 EMC RSA Archer GRC 5.4 SP1 P3 EMC RSA Archer GRC 5.4 SP1 P2 EMC RSA Archer GRC 5.4 SP1 P1 EMC RSA Archer GRC 5.4 SP1 EMC RSA Archer GRC 5.4 P2 EMC RSA Archer GRC 5.4 EMC RSA Archer GRC 5.3SP1 EMC RSA Archer GRC 5.3 EMC RSA Archer GRC 5.2SP1 EMC RSA Archer GRC 5.2 EMC RSA Archer GRC 5.0
Not Vulnerable:	EMC RSA Archer GRC 6.2 Patch 6

RSA Archer GRC CMS Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RSA Archer GRC CMS Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RSA Archer GRC CMS Multiple Security Vulnerabilities

References:

• EMC Homepage (EMC)
  
• EMC RSA Archer GRC HomePage (EMC)
  
• ESA-2017-111: RSA Archer® GRC Platform Multiple Vulnerabilities (Seclists.org)