Exploit the possiblities

RSA Archer GRC 6.2.0.5 XSS / File Upload / Privilege Escalation

RSA Archer GRC 6.2.0.5 XSS / File Upload / Privilege Escalation
Posted Oct 6, 2017
Authored by Erlend Leiknes, Mohit Rawat | Site emc.com

RSA Archer GRC version 6.2.0.5 suffers from cross site scripting, privilege escalation and remote file upload vulnerabilities.

tags | advisory, remote, vulnerability, xss, file upload
advisories | CVE-2017-14369, CVE-2017-14371, CVE-2017-14372, CVE-2017-8025
MD5 | ff86d3a0cf645804901bcb7686be5d89

RSA Archer GRC 6.2.0.5 XSS / File Upload / Privilege Escalation

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

ESA-2017-111: RSA Archer(r) GRC Platform Multiple Vulnerabilities
EMC Identifier: ESA-2017-111

CVE Identifier: CVE-2017-8016, CVE-2017-8025, CVE-2017-14369, CVE-2017-14370, CVE-2017-14371, CVE-2017-14372

Severity Rating: CVSSv3 Base Score: See below for scores of individual CVEs

Affected Products:
RSA Archer versions prior to 6.2.0.5

Summary:
RSA Archer GRC 6.2.0.5 Platform contains fixes for several vulnerabilities that could potentially be exploited by malicious users to compromise an affected system.

Details:
Multiple components within the RSA Archer product have been updated to address various vulnerabilities:

Stored Cross Site Scripting Vulnerabilities (CVE-2017-8016 and CVE-2017-14370)
RSA Archer is affected by stored cross-site scripting vulnerabilities via Questionnaire ID (CVE-2017-8016) and Source Asset ID (CVE-2017-14370) fields. An authenticated attacker may potentially exploit these vulnerabilities to execute arbitrary HTML in the users browser session in the context of the affected RSA Archer application.

CVSSv3 Base Score: 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)


Arbitrary File Upload Vulnerability (CVE-2017-8025)
RSA Archer is affected by an arbitrary file upload vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to upload malicious files via attachments to arbitrary paths on the web server.

CVSSv3 Base Score: 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)


Reflected Cross Site Scripting Vulnerabilities (CVE-2017-14371 and CVE-2017-14372)
RSA Archer is affected by reflected cross-site scripting vulnerabilities via request URL parameter (CVE-2017-14371) and certain RSA Archer Help pages (CVE-2017-14372). Attackers could potentially exploit these vulnerabilities to execute arbitrary HTML in the users browser session in the context of the affected RSA Archer application.

CVSSv3 Base Score: 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)


Privilege Escalation Vulnerability (CVE-2017-14369)
RSA Archer is affected by a privilege escalation vulnerability. A low privileged RSA Archer user may potentially exploit this vulnerability to elevate their privileges and export certain application records.

CVSSv3 Base Score: 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)


Recommendation:
RSA recommends all customers upgrade to the version mentioned below at the earliest opportunity.
RSA Archer GRC 6.2 Patch 6

For additional documentation, downloads, and more, visit the RSA Archer Suite page on RSA Link.


Credits:
RSA would like to thank the following individuals for reporting these vulnerabilities:
CVE-2017-8025 and CVE-2017-14371: Erlend Leiknes, Security Consultant with Mnemonic AS
CVE-2017-14369: Mohit Rawat
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJZ1mSzAAoJEHbcu+fsE81ZQXoH/0dqA4FNhkFLsMudtv8ekFYC
orKKSQPISC0+WuS4OeaX1JPsIB5oqxJnYygevhnZhpm+20xXw6F4Xfmu34z1tEEc
2AkWruWOCzW0+5euhLVvWXlgEoB3JeXZyK8nMPJs2i70ILuyRw3wSZc0EAXaqaY4
769kmn11Nj7UHlhnzv5ZekOZp2ZgIp6kaZH/8SD+sSZ4/IBmzQ448RBs6wAL1LCQ
7U1WZFE7Cb45ddChVbOmbqvIrxBQ4RP6Xhiy0+fiqmbFGjeb5pMOcPXLMSCemW7g
hDfCbk8tmDSD7Q2+3HlHj7foOcHD0HIxKRENFnMHdKu36zD64CodjEDefPiISEk=
=7h/y
-----END PGP SIGNATURE-----


Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

November 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    22 Files
  • 2
    Nov 2nd
    28 Files
  • 3
    Nov 3rd
    10 Files
  • 4
    Nov 4th
    1 Files
  • 5
    Nov 5th
    5 Files
  • 6
    Nov 6th
    15 Files
  • 7
    Nov 7th
    15 Files
  • 8
    Nov 8th
    13 Files
  • 9
    Nov 9th
    9 Files
  • 10
    Nov 10th
    9 Files
  • 11
    Nov 11th
    3 Files
  • 12
    Nov 12th
    2 Files
  • 13
    Nov 13th
    15 Files
  • 14
    Nov 14th
    17 Files
  • 15
    Nov 15th
    19 Files
  • 16
    Nov 16th
    15 Files
  • 17
    Nov 17th
    12 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close