PT-2022-10271 · Rsa · Rsa Archer

Angelo Alviar + 2 · Published 2022-06-02 · Updated 2022-06-09 · CVE-2021-33615

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RSA Archer version 6.8.00500.1003 P5

Description The issue allows for the unrestricted upload of a file with a dangerous type.

Recommendations For RSA Archer version 6.8.00500.1003 P5, consider restricting file upload capabilities to prevent the upload of dangerous file types until a patch is available.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-33615

Affected Products

Rsa Archer

References · 7

• https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33615 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33615 · Vendor Advisory
• https://github.com/fireeye/Vulnerability-Disclosures · Note
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0027/MNDT-2022-0027.md · Note
• https://t.me/cvenotify/31353 · Telegram Post
• https://t.me/cvenotify/31004 · Telegram Post