PT-2023-29528 · Rsa · Archer Platform

Published 2023-10-16 · Updated 2023-10-24 · CVE-2023-45357

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Archer Platform versions 6.x through 6.13 P2 HF1 Archer Platform version 6.13 P2 HF2 (6.13.0.2.2) and earlier

Description The issue allows an authenticated attacker to potentially obtain access to sensitive information via a popup warning message.

Recommendations For Archer Platform versions 6.x through 6.13 P2 HF1, update to version 6.13 P2 HF2 (6.13.0.2.2) or later. For Archer Platform version 6.13 P2 HF2 (6.13.0.2.2) and earlier, update to version 6.14 (6.14.0) or later.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2023-45357

Affected Products

Archer Platform

References · 6

• https://osv.dev/vulnerability/CVE-2023-45357 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45357 · Security Note
• https://archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/708617 · Vendor Advisory
• https://t.me/cvenotify/59588 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1714230453148774404 · Twitter Post
• https://twitter.com/CVEnew/status/1714138700907503975 · Twitter Post