PT-2022-10272 · Rsa · Rsa Archer

Angelo Alviar + 2 · Published 2022-04-04 · Updated 2022-04-11 · CVE-2021-33616

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RSA Archer versions 6.x through 6.9 SP1 P4 (6.9.1.4)

Description The issue allows stored XSS.

Recommendations For RSA Archer versions 6.x through 6.9 SP1 P4 (6.9.1.4), update to a version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-33616

Affected Products

Rsa Archer

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2021-33616 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33616 · Vendor Advisory
• https://archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497 · Vendor Advisory
• https://github.com/fireeye/Vulnerability-Disclosures · Note
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0020/MNDT-2022-0020.md · Note
• https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories · Note
• https://t.me/cvenotify/28389 · Telegram Post
• https://t.me/cvenotify/28443 · Telegram Post
• https://t.me/cibsecurity/40094 · Telegram Post