CVE-2018-11060
RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - security_alert@emc.com
- Published
- 2018-07-24
- Last modified
- 2024-09-16
Affected products
References
- http://seclists.org/fulldisclosure/2018/Jul/69
- http://www.securityfocus.com/bid/104892
- http://www.securitytracker.com/id/1041359
