Vulnerability Description
Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 (6.10.0.3.1) is also a fixed release.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rsa | Archer | >= 6.8, < 6.10.0.3.1 |
References
- https://archerirm.comProduct
- https://www.archerirm.community/t5/security-advisories/archer-update-for-impropeVendor Advisory
- https://archerirm.comProduct
- https://www.archerirm.community/t5/security-advisories/archer-update-for-impropeVendor Advisory
FAQ
What is CVE-2022-37316?
CVE-2022-37316 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated ...
How severe is CVE-2022-37316?
CVE-2022-37316 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-37316?
Check the references section above for vendor advisories and patch information. Affected products include: Rsa Archer.