CVE-2022-26950

Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability

Medium · published March 29, 2022

CVSS v3.1
5.4
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the Archer application without the victims realizing an attack occurred.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00552 · 45.4th percentile
Published
2022-03-29T23:33Z
EPSS history
Timeline
  • 29 MAR 23:33Z
    Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability
    cvelistv5