Description (CNA)
RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to upload malicious files via attachments to arbitrary paths on the web server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / RSA Archer GRC Platform prior to 6.2.0.5 | affected RSA Archer GRC Platform prior to 6.2.0.5 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/101195
- http://www.securitytracker.com/id/1039518
- http://seclists.org/fulldisclosure/2017/Oct/12
ADP enrichment
No English description supplied.