high8.8
CVE-2018-11060
RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API.
Impact
RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rsa | Archer | from 6.1.0.0 before 6.1.0.3 from 6.2.0.0 before 6.2.0.10 from 6.3.0.0 before 6.3.0.7 Version 6.4.0.0 |