PT-2023-25843 · Unknown · Archer Platform

Published 2023-07-14 · Updated 2023-07-26 · CVE-2023-37224

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 6.13

Description The issue allows an authenticated attacker to obtain sensitive information via the log files.

Recommendations For versions prior to 6.12.0.6, update to version 6.12.0.6 or later. For versions 6.12.0.6 and earlier than 6.13.0, update to version 6.13.0 or later. At the moment, there is no additional information about other mitigation measures.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2023-37224

Affected Products

Archer Platform

References · 5

• https://osv.dev/vulnerability/CVE-2023-37224 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37224 · Security Note
• https://archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362 · Vendor Advisory
• https://t.me/cibsecurity/66754 · Telegram Post
• https://archerirm.com · Note