CVE-2022-26950
First published: Tue Mar 29 2022(Updated: )
Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the Archer application without the victims realizing an attack occurred.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RSA Archer | >=6.1.0.0<6.9.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-26950?
CVE-2022-26950 is an open redirect vulnerability that affects Archer 6.x through 6.9 P2 (6.9.0.2).
How does CVE-2022-26950 affect RSA Archer?
CVE-2022-26950 allows a remote unprivileged attacker to redirect legitimate users to arbitrary websites and conduct phishing attacks in RSA Archer.
What is the severity of CVE-2022-26950?
The severity of CVE-2022-26950 is medium with a CVSS score of 6.1.
How can an attacker exploit the open redirect vulnerability in CVE-2022-26950?
An attacker can exploit the open redirect vulnerability in CVE-2022-26950 by tricking users into clicking on a malicious link, redirecting them to a phishing site to steal their credentials.
Is there a fix available for CVE-2022-26950?
At the moment, there is no specific fix available for CVE-2022-26950. It is recommended to follow the general security best practices and stay updated with any patches or security advisories provided by RSA Archer.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/rsa
- canonical/rsa archer
- version/rsa archer/6.1.0.0