CVE-2019-3758

RSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability. The vulnerability allows sysadmins to create user accounts with insufficient credentials. Unauthenticated attackers could gain unauthorized access to the system using those accounts.

Score
CVSS 3.1 9.8 Critical
Status
Modified - security_alert@emc.com
Published
2019-09-18
Last modified
2024-09-16
Weaknesses
CWE-288, CWE-521

Affected products

References

 
 
© AVABIS GmbH privacypolicy about