CVE-2017-5000: Infoleak

Published Jul 7, 2017

Updated

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack.

Affected Software

6 affected components

EMC Rsa Archer Egrc=5.4.1.3

EMC Rsa Archer Egrc=5.5.1.1

EMC Rsa Archer Egrc=5.5.1.3.1

EMC Rsa Archer Egrc=5.5.2

EMC Rsa Archer Egrc=5.5.2.3

EMC Rsa Archer Egrc=5.5.3.1

Event History

Jul 7, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-5000?

CVE-2017-5000 is a low-severity vulnerability that allows information exposure through error messages.

How can I mitigate CVE-2017-5000?

To mitigate CVE-2017-5000, you should apply the latest security updates provided by EMC for affected versions.

Which versions of EMC RSA Archer are affected by CVE-2017-5000?

CVE-2017-5000 affects EMC RSA Archer versions 5.4.1.3, 5.5.1.1, 5.5.1.3.1, 5.5.2, 5.5.2.3, and 5.5.3.1.

Who can exploit CVE-2017-5000?

CVE-2017-5000 can potentially be exploited by remote low-privileged attackers.

What type of vulnerability is CVE-2017-5000?

CVE-2017-5000 is classified as an information exposure vulnerability due to misleading error messages.