6.5
Medium
CVE-2019-3756 RSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability
Description
RSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability. Information relating to the backend database gets disclosed to low-privileged RSA Archer users' UI under certain error conditions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA Archer | Versions not published |
Other CVEs of RSA Archer
The 12 CVEs of RSA Archer →
CVE-2020-5337
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
4.6
Medium
CVE-2020-5335
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
5.0
Medium
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Medium
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
8.2
High