Lucene search

[email protected]NVD:CVE-2020-5331

HistoryMay 04, 2020 - 7:15 p.m.

CVE-2020-5331

2020-05-0419:15:13

CWE-200

CWE-598

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

8.4

Confidence

High

EPSS

Percentile

5.1%

JSON

RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache or log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.

Affected configurations

Nvd

Node

rsaarcherRange<6.7.0.3

VendorProductVersionCPE
rsaarcher*cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rsa	archer	*	cpe:2.3:a:rsa:archer::::::::

References

www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-Vulnerabilities

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

8.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2020-5331

prion1 cve1 cvelist1 nessus1