CVE-2018-1219: Medium severity rsa archer vulnerability
EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can potentially exploit this vulnerability to gather information about the user base and may use this information in subsequent attacks.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1219?
CVE-2018-1219 is an improper access control vulnerability in EMC RSA Archer, versions prior to 6.2.0.8, that allows a remote authenticated malicious user to gather information about the user base.
How does CVE-2018-1219 affect EMC RSA Archer?
CVE-2018-1219 affects EMC RSA Archer versions prior to 6.2.0.8 by exposing an API that can be exploited by a remote authenticated malicious user to enumerate user information.
What is the severity of CVE-2018-1219?
CVE-2018-1219 has a severity level of medium with a CVSS score of 4.3.
How can CVE-2018-1219 be exploited?
CVE-2018-1219 can be exploited by a remote authenticated malicious user who can use the exposed API to gather information about the user base.
How can I protect my EMC RSA Archer installation from CVE-2018-1219?
To protect your EMC RSA Archer installation from CVE-2018-1219, it is recommended to update to version 6.2.0.8 or later.