CVE-2018-1220

EMC RSA Archer GRC Platform prior to version 6.2.0.8 contains a URL redirect vulnerability in the QuickLinks feature. A remote attacker could exploit this to redirect genuine users to phishing websites and attempt to harvest sensitive information. Affected product: EMC RSA Archer GRC Platform; vu...

CVE-2018-1219

CVE-2018-1219 affects EMC RSA Archer, prior to version 6.2.0.8. The issue is an improper access control in an API used to enumerate user information, allowing a remote authenticated attacker to gather user-base details. The NVD entry describes a network-accessible vector with low complexity and l...