CVE-2017-5001: Infoleak

Published Jul 7, 2017

Updated

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack.

Affected Software

6 affected components

EMC Rsa Archer Egrc=5.4.1.3

EMC Rsa Archer Egrc=5.5.1.1

EMC Rsa Archer Egrc=5.5.1.3.1

EMC Rsa Archer Egrc=5.5.2

EMC Rsa Archer Egrc=5.5.2.3

EMC Rsa Archer Egrc=5.5.3.1

Event History

Jul 7, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-5001?

CVE-2017-5001 is classified as a low severity vulnerability.

How do I fix CVE-2017-5001?

To mitigate CVE-2017-5001, upgrade to a patched version of EMC RSA Archer that addresses this information exposure.

What types of systems are affected by CVE-2017-5001?

CVE-2017-5001 affects specific versions of EMC RSA Archer eGRC, namely 5.4.1.3 and various 5.5.x series versions.

What is the nature of the vulnerability in CVE-2017-5001?

CVE-2017-5001 involves information exposure through an error message that could be exploited by a remote low privileged attacker.

What could an attacker gain by exploiting CVE-2017-5001?

An attacker may use the information disclosed in an error message to launch a more focused attack.