exploitDog

CVE-2021-33615

Опубликовано: 02 июн. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 8.5

EPSS Низкий

Описание

RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type.

Ссылки

https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories
Broken Link
Vendor Advisory
https://github.com/fireeye/Vulnerability-Disclosures
Third Party Advisory
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0027/MNDT-2022-0027.md
Third Party Advisory
https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories
Broken Link
Vendor Advisory
https://github.com/fireeye/Vulnerability-Disclosures
Third Party Advisory
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0027/MNDT-2022-0027.md
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*

Версия от 6.0.0 (включая) до 6.9.3.4 (исключая)

cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*

Версия от 6.10.0.0 (включая) до 6.10.0.2 (исключая)

EPSS

Процентиль: 67%

0.00536

Низкий

7.5 High

CVSS3

8.5 High

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-h7q9-69x6-9x96

CVSS3: 7.5

github

больше 3 лет назад

RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type.

EPSS

Процентиль: 67%

0.00536

Низкий

7.5 High

CVSS3

8.5 High

CVSS2

Дефекты

CWE-434