PT-2021-18147
CVE-2021-29252
·
تاريخ النشر
2021-05-26
·
تاريخ التحديث
2021-06-02
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
RSA Archer versions prior to 6.9 SP1 P1 (6.9.1.1)
Description:
The issue allows a remote authenticated malicious user with access to modify link name fields to potentially execute code in a victim's browser. This is achieved through a stored XSS vulnerability.
Recommendations:
For versions prior to 6.9 SP1 P1 (6.9.1.1), update to version 6.9 SP1 P1 (6.9.1.1) or later to resolve the issue. As a temporary workaround, consider restricting access to modify link name fields to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾