Path Traversal in Emc Rsa Archer Egrc
CVE-2012-2293
Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.021 (80.2th percentile) — read the EPSS interpretation.
Affected products
- Emc Rsa_archer_egrc — versions 5.0, 5.1, 5.2
- Emc Rsa_archer_smartsuite — versions 4.3, 4.5
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)