Vulnerability Description
RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rsa | Archer Grc Platform | < 6.5.0.1 |
References
- http://www.securityfocus.com/bid/106396Third Party AdvisoryVDB Entry
- https://seclists.org/fulldisclosure/2019/Jan/3Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/106396Third Party AdvisoryVDB Entry
- https://seclists.org/fulldisclosure/2019/Jan/3Mailing ListThird Party Advisory
FAQ
What is CVE-2018-15780?
CVE-2018-15780 is a vulnerability with a CVSS score of 4.3 (MEDIUM). RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read...
How severe is CVE-2018-15780?
CVE-2018-15780 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-15780?
Check the references section above for vendor advisories and patch information. Affected products include: Rsa Archer Grc Platform.