CVE-2013-3277: Input Validation
Published Sep 5, 2013
·Updated
Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected Software
4 affected components
EMC Rsa Archer Egrc=5.0
EMC Rsa Archer Egrc=5.1
EMC Rsa Archer Egrc=5.2
EMC Rsa Archer Egrc=5.3
Event History
Sep 5, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3277?
CVE-2013-3277 is classified as a medium severity vulnerability due to its potential for phishing attacks.
2
How do I fix CVE-2013-3277?
To fix CVE-2013-3277, upgrade EMC RSA Archer GRC to version 5.4 or later that addresses the vulnerability.
3
What types of attacks can CVE-2013-3277 facilitate?
CVE-2013-3277 can facilitate phishing attacks by allowing attackers to redirect users to arbitrary websites.
4
Which versions of EMC RSA Archer GRC are affected by CVE-2013-3277?
CVE-2013-3277 affects EMC RSA Archer GRC versions 5.0 to 5.3.
5
Is CVE-2013-3277 still a risk if I upgrade to version 5.4?
No, upgrading to version 5.4 or later mitigates the risk associated with CVE-2013-3277.