CVE-2022-37316

published 2022-08-25

CVE-2022-37316: Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present…

Priority P3 36 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 (6.10.0.3.1) is also a fixed release.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
rsa	archer	>= 6.11 < 6.11.0.3	6.11.0.3
rsa	archer	>= 6.8 < 6.10.0.3.1	6.10.0.3.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.