PT-2023-24007 · Rsa · Archer Platform

Published 2023-07-14 · Updated 2023-07-27 · CVE-2023-32759

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6

Description The issue allows an authenticated attacker to obtain sensitive information via a crafted URL.

Recommendations For Archer Platform versions prior to 6.13, update to version 6.13 or later. For Archer Platform version 6.12.0.6, no additional action is required as this version is mentioned as fixed.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2023-32759

Affected Products

Archer Platform

References · 5

• https://osv.dev/vulnerability/CVE-2023-32759 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32759 · Security Note
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362 · Vendor Advisory
• https://t.me/cibsecurity/66751 · Telegram Post
• https://archerirm.community/t5/product-advisories/archer-announces-availability-of-archer-release-6-13/ta-p/697821 · Note