CVE-2012-2292 Security feature bypass in n/a
Remote attackers can bypass the Same Origin Policy in RSA Archer due to improper Silverlight cross-domain policy restrictions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-2292?
CVE-2012-2292 is a high-severity vulnerability in n/a, published on 6 Feb 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Silverlight cross-domain policy in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 does not restrict access to the Archer application, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Weakness: CWE-264
Which versions are affected by CVE-2012-2292?
It affects 2 products.
Products include Emc Rsa Archer Egrc, Emc Rsa Archer Smartsuite.
How do I fix CVE-2012-2292?
No fix has been published for CVE-2012-2292 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-2292 being exploited?
There is no known exploitation of CVE-2012-2292 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-4998 Cross-site request forgery in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1
- CVE-2015-0542 Cross-site request forgery in n/a
- CVE-2014-0641 Cross-site request forgery in n/a
- CVE-2012-2294 Other in n/a
- CVE-2017-4999 Missing authorization in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1
Sources
Also known as GHSA-f42w-97cr-xjj3.