CVE-2020-29536
First published: Fri Jan 29 2021(Updated: )
Archer before 6.8 P2 (6.8.0.2) is affected by a path exposure vulnerability. A remote authenticated malicious attacker with access to service files may obtain sensitive information to use it in further attacks.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RSA Archer | >=6.6<6.6.0.8 | |
| RSA Archer | >=6.7<6.7.0.8 | |
| RSA Archer | >=6.8<6.8.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-29536?
CVE-2020-29536 is a path exposure vulnerability in RSA Archer before 6.8 P2 (6.8.0.2).
How severe is CVE-2020-29536?
CVE-2020-29536 has a severity rating of medium, with a CVSS score of 4.3.
Who is affected by CVE-2020-29536?
RSA Archer versions between 6.6 and 6.8 P2 (6.8.0.2) are affected by CVE-2020-29536.
How can an attacker exploit CVE-2020-29536?
A remote authenticated attacker with access to service files can exploit CVE-2020-29536 to obtain sensitive information for further attacks.
Are there any official references for CVE-2020-29536?
Yes, you can find official references for CVE-2020-29536 at the following links: [RSA Community](https://community.rsa.com/docs/DOC-115223) and [RSA Vulnerability Response Policy](https://www.rsa.com/en-us/company/vulnerability-response-policy).
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/rsa
- canonical/rsa archer
- version/rsa archer/6.6
- version/rsa archer/6.7
- version/rsa archer/6.8