Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC RSA Archer SmartSuite Framework/RSA Archer GRC 安全绕过漏洞
Vulnerability Description
EMC RSA Archer SmartSuite Framework 4.x版本以及RSA Archer GRC 5.2SP1之前的5.x版本中的Silverlight跨域策略存在漏洞，该漏洞源于程序没有限制对Archer程序的访问权限。通过未明向量，远程攻击者能够利用该漏洞绕过同源策略。
CVSS Information
N/A
Vulnerability Type
N/A