NVD

Id
44108  
Name
CVE-2012-2292  
Description
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-02-06  
Modified Date
2013-02-06  
Seq
2012-2292  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221516 44108 CVE-2012-2292 20130131 ESA-2013-002: RSA Archer GRC Multiple Vulnerabilities  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19857 JVNDB-2013-001432 RSA Archer SmartSuite Framework および RSA Archer eGRC における同一生成元ポリシーを回避される脆弱性 RSA Archer SmartSuite Framework および RSA Archer eGRC の Silverlight クロスドメインポリシーは、Archer アプリケーションへのアクセスを制限しないため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2012-2292 55530 CVE-2012-2292 44108 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001432.html 2013-02-06 2013-02-07 View