Vulnerability Description
The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability. An malicious attacker with access to the Tableau workbook file may obtain access to credential information to use it in further attacks.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rsa | Archer | >= 6.4, < 6.6.0.8 |
Related Weaknesses (CWE)
References
- https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsaVendor Advisory
- https://www.rsa.com/en-us/company/vulnerability-response-policyVendor Advisory
- https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsaVendor Advisory
- https://www.rsa.com/en-us/company/vulnerability-response-policyVendor Advisory
FAQ
What is CVE-2021-29253?
CVE-2021-29253 is a vulnerability with a CVSS score of 5.1 (MEDIUM). The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability. An malicious attacker with access to the Tableau workbook f...
How severe is CVE-2021-29253?
CVE-2021-29253 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-29253?
Check the references section above for vendor advisories and patch information. Affected products include: Rsa Archer.