PT-2023-24009 · Unknown · Archer Platform

Publicado 2023-07-14 · Atualizado 2023-07-27 · CVE-2023-32760

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AC:H/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:R

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.13

Description The issue allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication.

Recommendations For versions prior to 6.12.0.6, update to version 6.12.0.6 or later. For versions 6.12.0.6 and earlier than 6.13, update to version 6.13.0 or later. As a temporary workaround, consider restricting access to API calls related to data feeds and data publication until a patch is available.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2023-32760

Produtos afetados

Archer Platform

Referências · 5

• https://t.me/cibsecurity/66759 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-32760 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-32760 · Aviso do Fabricante
• https://archerirm.community/t5/product-advisories/archer-announces-availability-of-archer-release-6-13/ta-p/697821 · Nota
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362 · Aviso do Fabricante