9 matches found
CVE-2019-3758
CVE-2019-3758 affects RSA Archer prior to 6.6 P2 (6.6.0.2). The root cause is improper authentication that enables sysadmins to create user accounts with insufficient credentials, allowing unauthenticated attackers to gain unauthorized access to the system using those accounts. Exploitation detai...
CVE-2020-5332
CVE-2020-5332 affects EMC RSA Archer versions prior to 6.7 P3 (6.7.0.3), with a command-injection vulnerability that an authenticated administrator can exploit to run arbitrary commands on the host running RSA Archer. According to NVD, this has a CVSS v3.1 base score of 7.2 (HIGH) , using a netwo...
CVE-2020-5331
RSA Archer contains an information exposure vulnerability in versions prior to 6.7 P3 (6.7.0.3). Affected component is the application’s handling of session data cached/logged by the server, which could allow an authenticated local user with access to log files to obtain sensitive information. Th...
CVE-2020-5334
RSA Archer versions prior to 6.7 P2 (6.7.0.2) are affected by a DOM-based cross-site scripting vulnerability. An unauthenticated remote attacker could exploit this by inducing a victim user to submit malicious HTML/JavaScript to the DOM in the browser, causing code to execute in the context of th...
CVE-2020-5336
CVE-2020-5336 affects Dell EMC RSA Archer versions prior to 6.7.0.1 (6.7 P1). The vulnerability is a URL injection that could allow an unauthenticated attacker to trick a victim application user into executing malicious JavaScript in the context of the web application. Connected documents corrobo...
CVE-2020-5337
RSA Archer is affected by a URL redirection vulnerability (CVE-2020-5337) in versions prior to 6.7 P1 (6.7.0.1). An unauthenticated remote attacker can lure users to malicious sites by sending crafted links, enabling phishing through redirection. The issue is documented across multiple sources co...
CVE-2020-5335
RSA Archer (EMC), versions prior to 6.7 P2 (6.7.0.2), is affected by a cross-site request forgery (CSRF) vulnerability. A remote unauthenticated attacker could trick a victim using the application into sending arbitrary requests that execute server-side operations with the victim’s privileges. Th...
CVE-2020-5333
The CVE-2020-5333 entry concerns RSA Archer before version 6.7 P3 (6.7.0.3) and before 6.6 P6 (6.6.0.6), which contains an authorization bypass vulnerability in the REST API. A remote authenticated Archer user could potentially view unauthorized information due to this flaw. Connected sources cor...