Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC RSA Archer GRC 安全漏洞
Vulnerability Description
EMC RSA Archer GRC是美国易安信（EMC）公司的一款企业IT治理和合规治理产品。该产品可以制定eGRC计划，用于管理企业风险、实现业务流程自动化等。 EMC RSA Archer GRC 5.5.3.4之前5.5.x版本中存在安全漏洞。远程攻击者可通过修改特定的IIS配置（为.bak文件设置Content-Type头）利用该漏洞读取web.config.bak文件，获取敏感的证书信息。
CVSS Information
N/A
Vulnerability Type
N/A