EMC RSA Archer GRC CVE-2013-3276 Access Security Bypass Vulnerability

Bugtraq ID:	62142
Class:	Access Validation Error
CVE:	CVE-2013-3276
Remote:	Yes
Local:	No
Published:	Sep 03 2013 12:00AM
Updated:	Sep 03 2013 12:00AM
Credit:	EMC
Vulnerable:	EMC RSA Archer GRC 5.3SP1 EMC RSA Archer GRC 5.3 EMC RSA Archer GRC 5.2SP1 EMC RSA Archer GRC 5.2
Not Vulnerable:	EMC RSA Archer GRC 5.4

EMC RSA Archer GRC CVE-2013-3276 Access Security Bypass Vulnerability

EMC RSA Archer GRC is prone to a security-bypass vulnerability.

Attackers can exploit this issue to gain unauthorized access to the affected application. This may aid in further attacks.

This issue is fixed in version EMC RSA Archer GRC 5.4.

EMC RSA Archer GRC CVE-2013-3276 Access Security Bypass Vulnerability

An attacker can exploit this issue using a web browser.

EMC RSA Archer GRC CVE-2013-3276 Access Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EMC RSA Archer GRC CVE-2013-3276 Access Security Bypass Vulnerability

References:

• EMC RSA Archer GRC HomePage (EMC)
  
• ESA-2013-057: RSA Archer(r) GRC Multiple Vulnerabilities (EMC)