CVE-2016-0899

—

CVSS 3.0

6.3 medium

EPSS

<1%p55

Published

Jul 4, 2016 (Jul 4, 2016)

Modified

Jun 17, 2026

Description

EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.

Vendors: emc
Products: rsa archer egrc
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.