PT-2019-16695 · Rsa · Rsa Archer

Publicado 2019-09-18 · Atualizado 2020-08-31 · CVE-2019-3756

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RSA Archer versions prior to 6.6 P3 (6.6.0.3)

Description The issue allows information related to the backend database to be disclosed to low-privileged users' UI under certain error conditions.

Recommendations For versions prior to 6.6 P3 (6.6.0.3), update to version 6.6 P3 (6.6.0.3) or later to resolve the issue.

Correção

Information Disclosure

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-200

CWE-209

Identificadores relacionados

CVE-2019-3756

Produtos afetados

Rsa Archer

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-3756 · Aviso do Fabricante
• https://community.rsa.com/docs/DOC-106759 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-3756 · Nota de Segurança