Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-2293
cve-2012-2293
directory traversal
emc
rsa archer
smartsuite framework
grc
nvd
vulnerability
upload
remote authenticated users
arbitrary code
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
61.0%
Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path.
Affected configurations
Node
emcrsa_archer_smartsuiteMatch4.3
ORemcrsa_archer_smartsuiteMatch4.5
Node
emcrsa_archer_egrcMatch5.0
ORemcrsa_archer_egrcMatch5.1
ORemcrsa_archer_egrcMatch5.2
Related
prion
prion
Directory traversal
2013-02-06 12:05:00
cvelist
cvelist
CVE-2012-2293
2022-10-03 16:15:35
nvd
nvd
CVE-2012-2293
2013-02-06 12:05:42
securityvulns
securityvulns
RSA Archer GRC multiple security vulnerabilities
2013-02-11 00:00:00
ESA-2013-002: RSA Archer® GRC Multiple Vulnerabilities
2013-02-11 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
61.0%
Related for CVE-2012-2293