« Back to list

CVE-2014-0640

Status: ModifiedMedium (4)—

EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

EMC — RSA Archer Egrc

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2014-0640",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-08-20T11:17:13.610",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-08/0097.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/69288",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030738",
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95362",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-08/0097.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/69288",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030738",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95362",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "EMC RSA Archer GRC Platform 5.x anterior a 5.5 SP1 permite a usuarios remotos autenticados evadir las restricciones sobre el acceso a recursos a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:03:24.973",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:rsa_archer_egrc:5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF1C8BE8-3091-4E1B-AA6F-F05DD4EBEE0F"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_archer_egrc:5.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFDE64AE-F24C-474E-B89E-952D10621F7A"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_archer_egrc:5.4:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD7F0766-FB33-4315-B02C-D92AE9B0F900"
            },
            {
              "criteria": "cpe:2.3:a:emc:rsa_archer_egrc:5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3DB8B9F-A96F-4B38-B7B5-4D923FCFDBAE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}