PT-2023-29528 · Rsa · Archer Platform

Publicado 2023-10-16 · Atualizado 2023-10-24 · CVE-2023-45357

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions 6.x through 6.13 P2 HF1 Archer Platform version 6.13 P2 HF2 (6.13.0.2.2) and earlier

Description The issue allows an authenticated attacker to potentially obtain access to sensitive information via a popup warning message.

Recommendations For Archer Platform versions 6.x through 6.13 P2 HF1, update to version 6.13 P2 HF2 (6.13.0.2.2) or later. For Archer Platform version 6.13 P2 HF2 (6.13.0.2.2) and earlier, update to version 6.14 (6.14.0) or later.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2023-45357

Produtos afetados

Archer Platform

Referências · 6

• https://t.me/cvenotify/59588 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1714230453148774404 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-45357 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-45357 · Nota de Segurança
• https://archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/708617 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1714138700907503975 · Publicação no Twitter