CVE-2017-5002
First published: Fri Jul 07 2017(Updated: )
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RSA Archer | =5.4.1.3 | |
| RSA Archer | =5.5.1.1 | |
| RSA Archer | =5.5.1.3.1 | |
| RSA Archer | =5.5.2 | |
| RSA Archer | =5.5.2.3 | |
| RSA Archer | =5.5.3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-5002?
CVE-2017-5002 is characterized as a medium severity vulnerability due to its potential to enable phishing attacks through open redirects.
How do I fix CVE-2017-5002?
To fix CVE-2017-5002, update to a patched version of EMC RSA Archer that addresses the open redirect vulnerability.
Who is affected by CVE-2017-5002?
CVE-2017-5002 affects EMC RSA Archer versions 5.4.1.3, 5.5.1.1, 5.5.1.3.1, 5.5.2, 5.5.2.3, and 5.5.3.1.
What type of attack can CVE-2017-5002 facilitate?
CVE-2017-5002 can facilitate phishing attacks by allowing an attacker to redirect users to malicious websites.
Is CVE-2017-5002 related to unauthorized access?
While CVE-2017-5002 itself does not directly allow unauthorized access, it can enable attackers to steal credentials through phishing.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/emc
- canonical/rsa archer
- version/rsa archer/5.4.1.3
- version/rsa archer/5.5.1.1
- version/rsa archer/5.5.1.3.1
- version/rsa archer/5.5.2
- version/rsa archer/5.5.2.3
- version/rsa archer/5.5.3.1