CVE-2016-0899
CVE-2016-0899
EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →