PT-2022-10714
CVE-2021-38362
·
تاريخ النشر
2022-03-30
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
RSA Archer versions 6.x through 6.9 SP3 (6.9.3.0)
Description
An authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct Object Reference (IDOR) issue and retrieve sensitive data.
Recommendations
For RSA Archer versions 6.x through 6.9 SP3 (6.9.3.0), as a temporary workaround, consider restricting access to the vulnerable REST API endpoint until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾