PT-2022-23924 · Rsa · Archer Platform

Published 2022-08-25 · Updated 2022-08-30 · CVE-2022-37317

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AC:L/AV:N/A:L/C:H/I:L/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.11 P3 Archer Platform version 6.10 P4 is not affected, however versions prior to 6.10 P4 are affected.

Description The issue allows an authenticated remote attacker to potentially exploit an HTML injection vulnerability by tricking a victim application user into executing malicious code in the context of the web application.

Recommendations For Archer Platform versions prior to 6.11 P3, update to version 6.11 P3 or later to resolve the issue. For Archer Platform versions prior to 6.10 P4, update to version 6.10 P4 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-37317

Affected Products

Archer Platform

References · 4

• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/682060 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37317 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37317 · Security Note
• https://archerirm.com · Note