CVE-2017-5002: Medium severity rsa archer vulnerability

Published Jul 7, 2017

Updated

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred.

Affected Software

6 affected components

EMC Rsa Archer Egrc=5.4.1.3

EMC Rsa Archer Egrc=5.5.1.1

EMC Rsa Archer Egrc=5.5.1.3.1

EMC Rsa Archer Egrc=5.5.2

EMC Rsa Archer Egrc=5.5.2.3

EMC Rsa Archer Egrc=5.5.3.1

Event History

Jul 7, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-5002?

CVE-2017-5002 is characterized as a medium severity vulnerability due to its potential to enable phishing attacks through open redirects.

How do I fix CVE-2017-5002?

To fix CVE-2017-5002, update to a patched version of EMC RSA Archer that addresses the open redirect vulnerability.

Who is affected by CVE-2017-5002?

CVE-2017-5002 affects EMC RSA Archer versions 5.4.1.3, 5.5.1.1, 5.5.1.3.1, 5.5.2, 5.5.2.3, and 5.5.3.1.

What type of attack can CVE-2017-5002 facilitate?

CVE-2017-5002 can facilitate phishing attacks by allowing an attacker to redirect users to malicious websites.

Is CVE-2017-5002 related to unauthorized access?

While CVE-2017-5002 itself does not directly allow unauthorized access, it can enable attackers to steal credentials through phishing.