CVE-2016-0899

EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by…

published July 4, 2016

CVSS
—
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00830 · 57.1th percentile
Published
2016-07-04T16:00Z
EPSS history
Timeline
  • 04 JUL 16:00Z
    EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by…
    cvelistv5