CVE-2024-34092

Опубликовано: 06 мая 2024

Источник: nvd

CVSS3: 8.8

CVSS3: 6.3

EPSS Низкий

Описание

An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.

Ссылки

https://archerirm.com
Product
https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
Vendor Advisory
https://archerirm.com
Product
https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*

Версия до 6.14.0.3 (исключая)

cpe:2.3:a:archerirm:archer:2024.03:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00146

Низкий

8.8 High

CVSS3

6.3 Medium

CVSS3

Дефекты

CWE-613

Связанные уязвимости

GHSA-4j27-qhm5-88w7

CVSS3: 8.8

github

почти 2 года назад

An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.

EPSS

Процентиль: 35%

0.00146

Низкий

8.8 High

CVSS3

6.3 Medium

CVSS3

Дефекты

CWE-613