Vulnerability Description
RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed password to use it in further attacks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rsa | Archer Grc Platform | < 6.5.2.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/107406Third Party AdvisoryVDB Entry
- https://seclists.org/fulldisclosure/2019/Mar/19Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/107406Third Party AdvisoryVDB Entry
- https://seclists.org/fulldisclosure/2019/Mar/19Mailing ListThird Party Advisory
FAQ
What is CVE-2019-3716?
CVE-2019-3716 is a vulnerability with a CVSS score of 7.8 (HIGH). RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA Archer log files. An authenticated malici...
How severe is CVE-2019-3716?
CVE-2019-3716 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3716?
Check the references section above for vendor advisories and patch information. Affected products include: Rsa Archer Grc Platform.