VIR Vulnerability Intelligence Relay

CVE-2016-0899

medium
Published 2016-07-04 · Modified 2026-05-06
CVSS v3
6.3
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v2
3.5
VIR risk
6.3

Description

EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.

Predictions

Exploit likelihood
73%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
dell emcrsa_archer_egrc5.5
dell emcrsa_archer_egrc5.5.1
dell emcrsa_archer_egrc5.5.1.3
dell emcrsa_archer_egrc5.5.2.3

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.