CVE-2019-3716: Information Exposure Vulnerability
Published Mar 9, 2019
·Updated
RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed password to use it in further attacks.
Affected Software
1 affected component
RSA Archer GRC Platform<6.5.2.0
Event History
Mar 13, 2019
CVE Published
09:29 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2019-3716?
CVE-2019-3716 is an information exposure vulnerability in RSA Archer versions prior to 6.5 SP2.
2
What is the severity of CVE-2019-3716?
CVE-2019-3716 has a severity rating of 7.8 (high).
3
How does CVE-2019-3716 affect RSA Archer?
CVE-2019-3716 exposes the database connection password in plain text in RSA Archer log files for versions prior to 6.5 SP2.
4
Who is affected by CVE-2019-3716?
Organizations using RSA Archer versions prior to 6.5 SP2 are affected by CVE-2019-3716.
5
How can I fix CVE-2019-3716?
To fix CVE-2019-3716, update RSA Archer to version 6.5 SP2 or later.