CVE-2018-1219

2018-03-0815:00:00

dell

www.cve.org

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.0%

JSON

EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can potentially exploit this vulnerability to gather information about the user base and may use this information in subsequent attacks.

CNA Affected

[
  {
    "product": "EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8"
      }
    ]
  }
]