Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2018-11065

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A ma

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC RSA Archer

  • 6.1.x,6.2.xaffected
  • 6.3.x to < 6.3.0.7affected
  • 6.4.x to < 6.4.0.1affected

References