CVE-2024-34092: High severity rsa archer grc platform vulnerability
Published May 6, 2024
·Updated
An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.
Affected Software
4 affected components
Archer Platform<2024.04
Archer Platform
Archerirm Archer<6.14.0.3
Archerirm Archer=2024.03
Event History
May 6, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-34092?
CVE-2024-34092 is classified as a critical vulnerability due to improper session handling which can lead to unauthorized access.
2
How do I fix CVE-2024-34092?
To fix CVE-2024-34092, update to Archer Platform version 6.14.0.3 or later.
3
What are the risks associated with CVE-2024-34092?
The risks associated with CVE-2024-34092 include potential unauthorized access to sensitive information due to improper session management.
4
Which versions of Archer Platform are affected by CVE-2024-34092?
Archer Platform versions prior to 2024.04 and 6.14 P3 (6.14.0.3) are affected by CVE-2024-34092.
5
What is the nature of the vulnerability in CVE-2024-34092?
CVE-2024-34092 involves mishandling of authentication due to failure to terminate an existing user session.