Improper Access Control in Archer Platform by RSA
CVE-2022-30584

9.6CRITICAL

Key Information:

Vendor

Rsa
Status
Archer
Vendor
CVE Published:
26 May 2022

What is CVE-2022-30584?

The Archer Platform prior to version 6.11 contains an improper access control vulnerability in its SSO ADFS functionality. This flaw could potentially be exploited by attackers, allowing them to gain unauthorized access to sensitive resources or manipulate the system in unintended ways. Users are encouraged to upgrade to the latest versions to mitigate the risks associated with this vulnerability.

References

https://www.archerirm.community/t5/releases/tkb-p/releases
x_refsource_MISC
https://www.archerirm.community/t5/security-advisories/ar...
x_refsource_MISC

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.