[Historic] Archer Update for GRC Multiple Cross-Site Request Forgery Vulnerabilities

[Anonymous]

EMC Identifier: ESA-2015-094

CVE Identifier: CVE-2015-0542

Severity Rating: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)

Affected Products:

•  RSA Archer GRC 5.5 SP1

Summary: 

RSA Archer GRC contains fixes for multiple Cross-Site Request Forgery vulnerabilities that could potentially be exploited by malicious users to compromise the affected system.

Details: 

RSA Archer GRC platform contains fixes for multiple Cross-Site Request Forgery vulnerabilities that could potentially be exploited by malicious users to perform unauthorized actions on behalf of authenticated users of the application.

Recommendation:

 The following RSA Archer GRC release contains resolutions to these vulnerabilities:

•  RSA Archer GRC 5.5 SP1 P3

 RSA recommends all customers upgrade at their earliest opportunity.