Описание
RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.5 (исключая)
Одно из
cpe:2.3:a:rsa:archer_grc_platform:*:*:*:*:*:*:*:*
cpe:2.3:a:rsa:archer_grc_platform:6.5:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00043
Низкий
7.8 High
CVSS3
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-532
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.
EPSS
Процентиль: 13%
0.00043
Низкий
7.8 High
CVSS3
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-532