Open Redirect Vulnerability in RSA Archer by RSA

CVE-2020-29537

Summary

RSA Archer prior to version 6.8 P2 (6.8.0.2) is susceptible to an open redirect vulnerability that allows a remote privileged attacker to redirect unsuspecting users to arbitrary websites. This flaw could be exploited to conduct phishing attacks, enabling the attacker to collect user credentials and gain unauthorized access to Archer without raising suspicion from the victims.

References