Improper access control

2022-03-3000:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.7%

JSON

Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments. A remote authenticated malicious user could potentially exploit this vulnerability to gain access to files that should only be allowed by extra privileges.

CPENameOperatorVersion
archerge6.1.0.0
archerlt6.9.2.2

CPE	Name	Operator	Version
	archer	ge	6.1.0.0
	archer	lt	6.9.2.2

References

www.archerirm.community/t5/general-support-information/tkb-p/information-support

www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497