CVE-2018-11065

Опубликовано: 24 авг. 2018

Источник: nvd

CVSS3: 2.7

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.

Ссылки

http://seclists.org/fulldisclosure/2018/Aug/31
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/105128
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041540
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Aug/31
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/105128
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041540
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*

Версия от 6.1.0.0 (включая) до 6.1.0.3 (исключая)

cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*

Версия от 6.2.0.0 (включая) до 6.2.0.10 (исключая)

cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*

Версия от 6.3.0.0 (включая) до 6.3.0.7 (исключая)

cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*

Версия от 6.4.0.0 (включая) до 6.4.0.1 (исключая)

EPSS

Процентиль: 44%

0.00219

Низкий

2.7 Low

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-m4p9-37xg-7wj9

CVSS3: 4.3

github

больше 3 лет назад

EPSS

Процентиль: 44%

0.00219

Низкий

2.7 Low

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-89