Path Exposure Vulnerability in RSA Archer by RSA
CVE-2020-29536

4.3MEDIUM

Key Information:

Vendor

Rsa
Status
Archer
Vendor
CVE Published:
29 January 2021

What is CVE-2020-29536?

The RSA Archer platform prior to version 6.8 P2 (6.8.0.2) is susceptible to a path exposure vulnerability. This issue permits a remote authenticated attacker, who has access to service files, to exploit the flaw by potentially extracting sensitive information. This information could be leveraged to conduct further malicious activities, posing a significant risk to systems and data integrity.

References

https://www.rsa.com/en-us/company/vulnerability-response-...
x_refsource_MISC
https://community.rsa.com/docs/DOC-115223
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2020-29536 : Path Exposure Vulnerability in RSA Archer by RSA