CVE-2022-26948: High severity rsa archer grc platform vulnerability
The Archer RSS feed integration for Archer 6.x through 6.9 SP1 (6.9.1.0) is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this security vulnerability?
The vulnerability ID for this security vulnerability is CVE-2022-26948.
What is the severity of CVE-2022-26948?
CVE-2022-26948 has a severity rating of 7.5 (high).
Which version of RSA Archer is affected by CVE-2022-26948?
RSA Archer versions between 6.x and 6.9 SP1 (6.9.1.0) are affected by CVE-2022-26948.
What is the impact of CVE-2022-26948?
CVE-2022-26948 allows a malicious attacker to obtain access to credential information, which can be used in further attacks.
Are there any resources for additional information about this vulnerability?
Yes, you can find additional information about CVE-2022-26948 at the following links: [Reference 1](https://www.archerirm.community/t5/general-support-information/tkb-p/information-support) and [Reference 2](https://www.archerirm.community/t5/security-advisories/archer-an-rsa-business-update-for-multiple-vulnerabilities/ta-p/674497).