PT-2018-10273 · Rsa · Rsa Archer

Donato Onofri + 1 · Publicado 2018-07-24 · Atualizado 2019-10-09 · CVE-2018-11059

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions RSA Archer versions prior to 6.4.0.1

Description The issue allows a remote authenticated malicious user to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.

Recommendations For RSA Archer versions prior to 6.4.0.1, update to version 6.4.0.1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-11059

Produtos afetados

Rsa Archer

Referências · 5

• http://securitytracker.com/id/1041359 · Nota
• https://osv.dev/vulnerability/CVE-2018-11059 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2018/Jul/69 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-11059 · Nota de Segurança
• http://securityfocus.com/bid/104892 · Nota