PT-2023-24010 · Rsa · Archer Platform

Published 2023-07-14 · Updated 2023-07-27 · CVE-2023-32761

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6

Description The issue is related to a Cross Site Request Forgery (CSRF) vulnerability, which allows an authenticated attacker to execute arbitrary code via a crafted request.

Recommendations For Archer Platform versions prior to 6.13, update to version 6.13 or later. For Archer Platform version 6.12.0.6, no specific action is required as it is mentioned as a fixed version.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-32761

Affected Products

Archer Platform

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-32761 · Security Note
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32761 · Vendor Advisory
• https://archerirm.community/t5/product-advisories/archer-announces-availability-of-archer-release-6-13/ta-p/697821 · Note
• https://t.me/cibsecurity/66743 · Telegram Post