Vulnerability Description
Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rsa | Archer | >= 6.6, < 6.6.0.8 |
References
- https://community.rsa.com/docs/DOC-115223Vendor Advisory
- https://www.rsa.com/en-us/company/vulnerability-response-policyVendor Advisory
- https://community.rsa.com/docs/DOC-115223Vendor Advisory
- https://www.rsa.com/en-us/company/vulnerability-response-policyVendor Advisory
FAQ
What is CVE-2020-29538?
CVE-2020-29538 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather in...
How severe is CVE-2020-29538?
CVE-2020-29538 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-29538?
Check the references section above for vendor advisories and patch information. Affected products include: Rsa Archer.