5.0
Medium
CVE-2020-5335 RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
Description
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to send arbitrary requests to the vulnerable application to perform server operations with the privileges of the authenticated victim user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA Archer | Versions not published |
Other CVEs of RSA Archer
The 12 CVEs of RSA Archer →
CVE-2020-5337
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
4.6
Medium
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Medium
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
8.2
High
CVE-2020-5332
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability
7.2
High