CVE-2020-29538

Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API

Medium · published January 29, 2021

CVSS v3.1
4.9
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:H/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00969 · 61.5th percentile
Published
2021-01-29T06:35Z
EPSS history
Timeline
  • 29 JAN 06:35Z
    Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API
    cvelistv5