CVE-2012-2292
High
Description
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
SeverityHigh
CVSS7.5
Exploit probability—
ProductEmc Rsa Archer Smartsuite
PublishedFeb 6, 2013
First seenFeb 6, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc rsa_archer_smartsuite | 4.3, 4.5 | — |
| emc rsa_archer_egrc | 5.0, 5.1, 5.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.