PT-2022-20190 · Rsa · Archer Platform

Published 2022-05-26 · Updated 2023-08-08 · CVE-2022-30585

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:R

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.11

Description The REST API in Archer Platform contains an Authorization Bypass issue. A remote authenticated malicious user could potentially exploit this to view sensitive information.

Recommendations For versions prior to 6.11, update to version 6.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the REST API until a patch is available.

Fix

Related Identifiers

CVE-2022-30585

Affected Products

Archer Platform

References · 6

• https://osv.dev/vulnerability/CVE-2022-30585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30585 · Security Note
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/677341 · Vendor Advisory
• https://archerirm.community/t5/releases/tkb-p/releases · Vendor Advisory
• https://t.me/cvenotify/30813 · Telegram Post
• https://t.me/cibsecurity/43463 · Telegram Post