4.3
Medium
CVE-2020-5333 RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API
Description
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to view unauthorized information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA Archer | Versions not published |
Other CVEs of RSA Archer
The 12 CVEs of RSA Archer →
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Medium
CVE-2020-5335
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
5.0
Medium
CVE-2020-5337
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
4.6
Medium
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
8.2
High