CVE-2012-2292 in RSA Archer GRC
Summary
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
04/19/2012
Disclosure
02/06/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7595 | EMC RSA Archer GRC Same-Origin Policy access control | 264 | Not defined | Official fix | CVE-2012-2292 |