PT-2022-18136 · Archery · Archery

Published 2022-03-29 · Updated 2022-04-06 · CVE-2022-26950

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Archer versions 6.x through 6.9 P2 (6.9.0.2)

Description The issue allows a remote unprivileged attacker to potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the Archer application without the victims realizing an attack occurred.

Recommendations For versions 6.x through 6.9 P2 (6.9.0.2), consider restricting access to sensitive features until a patch is available. As a temporary workaround, consider implementing additional authentication steps to minimize the risk of silent authentication. Avoid using the Archer application for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-26950

Affected Products

Archery

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-26950 · Security Note
• https://archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497 · Vendor Advisory
• https://archerirm.community/t5/general-support-information/tkb-p/information-support · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-26950 · Vendor Advisory
• https://t.me/cibsecurity/39793 · Telegram Post
• https://t.me/cvenotify/28484 · Telegram Post