PT-2018-10273 · Rsa · Rsa Archer

Donato Onofri + 1 · Published 2018-07-24 · Updated 2019-10-09 · CVE-2018-11059

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions RSA Archer versions prior to 6.4.0.1

Description The issue allows a remote authenticated malicious user to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.

Recommendations For RSA Archer versions prior to 6.4.0.1, update to version 6.4.0.1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-11059

Affected Products

Rsa Archer

References · 5

• https://osv.dev/vulnerability/CVE-2018-11059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11059 · Security Note
• http://securitytracker.com/id/1041359 · Note
• http://seclists.org/fulldisclosure/2018/Jul/69 · Note
• http://securityfocus.com/bid/104892 · Note