Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-1219

EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious

Description

EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can potentially exploit this vulnerability to gather information about the user base and may use this information in subsequent attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8

  • EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8affected

References