Security Advisory
CVE-2016-0899
6.3
MEDIUM
Vulnerability Description
EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files.
Published Date
July 4, 2016
Official Source
NIST NVD Advisory