4.6
Medium
CVE-2020-5337 RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
Description
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA Archer | Versions not published |
Other CVEs of RSA Archer
The 12 CVEs of RSA Archer →
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Medium
CVE-2020-5335
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
5.0
Medium
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
8.2
High
CVE-2020-5331
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability
8.8
High