7.8
Élevée
CVE-2019-3715 RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability
Description
RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RSA Archer | Versions non publiées |
Autres CVE de RSA Archer
Les 12 CVE de RSA Archer →
CVE-2020-5337
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability
4.6
Moyenne
CVE-2020-5335
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability
5.0
Moyenne
CVE-2020-5336
RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerability
4.6
Moyenne
CVE-2020-5334
RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a Document Object Model (DOM) based cross-site scripting…
8.2
Élevée