Aller au contenu
Se connecter
2.7 Faible

CVE-2018-11065 The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x…

Description

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
RSA Archer 6.4 6.4.x → < 6.4.0.1 6.4.0.1
RSA Archer 6.3 6.3.x → < 6.3.0.7 6.3.0.7

Autres CVE de RSA Archer

Les 3 CVE de RSA Archer →
CVE-2018-11059 RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability 8.2 Élevée CVE-2018-11060 RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API 8.8 Élevée
Suivre cette CVE