CVE-2014-0640

EXPLOITED

EMC RSA Archer GRC Platform 5.x - Authenticated Resource Access Restriction Bypass

Title source: llm

Exploitation Summary

CVE-2014-0640 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/95362

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2014-08/0097.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030738

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/69288

Scores

EPSS 0.0020

EPSS Percentile 41.7%

Details

VulnCheck KEV 2021-08-17

CWE

CWE-264

Status published

Products (3)

emc/rsa_archer_egrc 5.3

emc/rsa_archer_egrc 5.4 (2 CPE variants)

emc/rsa_archer_egrc 5.5

Published Aug 20, 2014

Tracked Since Feb 18, 2026