CVE-2014-2505: Medium severity rsa archer vulnerability

Published Aug 20, 2014

Updated

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors.

Affected Software

4 affected components

EMC Rsa Archer Egrc=5.3

EMC Rsa Archer Egrc=5.4

EMC Rsa Archer Egrc=5.4-sp1

EMC Rsa Archer Egrc=5.5

Event History

Aug 20, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-2505?

CVE-2014-2505 is considered a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.

How do I fix CVE-2014-2505?

The recommended fix for CVE-2014-2505 is to upgrade EMC RSA Archer GRC Platform to version 5.5 SP1 or later.

What versions are affected by CVE-2014-2505?

CVE-2014-2505 affects EMC RSA Archer GRC Platform versions 5.3, 5.4, and 5.5 before SP1.

What can attackers do with CVE-2014-2505?

Attackers can exploit CVE-2014-2505 to trigger the download of arbitrary code, potentially altering the functionality of the product.

Is there a workaround for CVE-2014-2505 before upgrading?

There are no specified workarounds for CVE-2014-2505; upgrading to the secure version is the only mitigation.