CVE-2017-4999: Infoleak

Published Jul 7, 2017

Updated

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other users' discussion forum messages.

Affected Software

6 affected components

EMC Rsa Archer Egrc=5.4.1.3

EMC Rsa Archer Egrc=5.5.1.1

EMC Rsa Archer Egrc=5.5.1.3.1

EMC Rsa Archer Egrc=5.5.2

EMC Rsa Archer Egrc=5.5.2.3

EMC Rsa Archer Egrc=5.5.3.1

Event History

Jul 7, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-4999?

CVE-2017-4999 has a low severity rating due to its nature of allowing privilege escalation with low privileges.

How do I fix CVE-2017-4999?

To fix CVE-2017-4999, it is recommended to upgrade to a version of EMC RSA Archer that is not affected by this vulnerability.

Who is affected by CVE-2017-4999?

CVE-2017-4999 affects users of EMC RSA Archer versions 5.4.1.3, 5.5.x, particularly versions leading up to 5.5.3.1.

What type of vulnerability is CVE-2017-4999?

CVE-2017-4999 is classified as an authorization bypass vulnerability that can be exploited through user-controlled keys.

Can CVE-2017-4999 lead to data exposure?

Yes, CVE-2017-4999 can potentially allow attackers to view other users' messages within the discussion forum.