8.8

CVE-2017-4998

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is potentially affected by a cross-site request forgery vulnerability. A remote low privileged attacker may potentially exploit the vulnerability to execute unauthorized requests on behalf of the victim, using the authenticated user's privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emc ≫ Rsa Archer Egrc Version5.4.1.3
Emc ≫ Rsa Archer Egrc Version5.5.1.1
Emc ≫ Rsa Archer Egrc Version5.5.1.3.1
Emc ≫ Rsa Archer Egrc Version5.5.2
Emc ≫ Rsa Archer Egrc Version5.5.2.3
Emc ≫ Rsa Archer Egrc Version5.5.3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.88% 0.542
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://seclists.org/fulldisclosure/2017/Jun/49
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/99354
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038815
Third Party Advisory
VDB Entry