4.3
Medium
CVE-2018-15780 RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability
Description
RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA Archer 6.5 | earliest → < 6.5.0.1 | 6.5.0.1 |
Other CVEs of RSA Archer
The 12 CVEs of RSA Archer →
CVE-2020-5337
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
4.6
Medium
CVE-2020-5335
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
5.0
Medium
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Medium
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
8.2
High