PT-2023-24010 · Rsa · Archer Platform

Publicado 2023-07-14 · Atualizado 2023-07-27 · CVE-2023-32761

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6

Description The issue is related to a Cross Site Request Forgery (CSRF) vulnerability, which allows an authenticated attacker to execute arbitrary code via a crafted request.

Recommendations For Archer Platform versions prior to 6.13, update to version 6.13 or later. For Archer Platform version 6.12.0.6, no specific action is required as it is mentioned as a fixed version.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-32761

Produtos afetados

Archer Platform

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-32761 · Nota de Segurança
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362 · Aviso do Fabricante
• https://archerirm.community/t5/product-advisories/archer-announces-availability-of-archer-release-6-13/ta-p/697821 · Nota
• https://osv.dev/vulnerability/CVE-2023-32761 · Aviso do Fabricante
• https://t.me/cibsecurity/66743 · Publicação no Telegram