Information Exposure Vulnerability
CVE-2019-3715

7.8HIGH

Key Information:

Vendor
Dell
Status
Rsa Archer
Vendor
CVE Published:
13 March 2019

Summary

RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.

Affected Version(s)

RSA Archer < 6.5 P1

References

https://seclists.org/fulldisclosure/2019/Mar/19
mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/107443
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.