CVE-2015-4543

Severity CVSS v4.0:
Pending analysis
Type:
CWE-200 Information Leak / Disclosure
Publication date:
26/09/2015
Last modified:
12/04/2025

Description

EMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified circumstances, which allows remote authenticated users to obtain sensitive information by reading database fields.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:emc:rsa_archer_grc:5.5.0:*:*:*:*:*:*:*
cpe:2.3:a:emc:rsa_archer_grc:5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:emc:rsa_archer_grc:5.5.2:*:*:*:*:*:*:*