URL Injection Vulnerability in RSA Archer Products
CVE-2020-26884

6.1MEDIUM

Key Information:

Vendor
Rsa
Status
Archer
Vendor
CVE Published:
18 November 2020

Summary

RSA Archer versions 6.8 through 6.9 contain a URL injection vulnerability that allows an unauthenticated remote attacker to manipulate a victim's web application session. By convincing a user to execute malicious JavaScript code, the attacker can potentially compromise the integrity and confidentiality of the application. Organizations using affected versions are advised to implement security measures to mitigate the risks associated with this vulnerability.

References

https://community.rsa.com/docs/DOC-114997
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.