CVE-2023-48641: High severity rsa archer vulnerability
Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass authorization checks, in order to gain execute access to AWF application resources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48641?
CVE-2023-48641 is considered a medium severity vulnerability due to its potential for exploitation in multi-instance Archer platforms.
How do I fix CVE-2023-48641?
To mitigate CVE-2023-48641, upgrade your Archer platform to version 6.14 P1 HF2 or later.
Who is affected by CVE-2023-48641?
CVE-2023-48641 affects authenticated users of Archer Platform versions prior to 6.14.0.1.2.
What type of vulnerability is CVE-2023-48641?
CVE-2023-48641 is classified as an insecure direct object reference vulnerability.
What could an attacker do with CVE-2023-48641?
An attacker exploiting CVE-2023-48641 could manipulate resource references to bypass authorization controls.