CVE-2019-3756CWE-209

RSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability

Medium · published September 18, 2019

CVSS v3.0
6.5
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

RSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability. Information relating to the backend database gets disclosed to low-privileged RSA Archer users' UI under certain error conditions.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01090 · 65.1th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2019-09-18T22:23Z
EPSS history
Timeline
  • 18 SEP 22:23Z
    RSA Archer, versions prior to 6.6 P3 (6.6.0.3), contain an information disclosure vulnerability
    cvelistv5