Lucene search

K
cveMitreCVE-2023-32760
HistoryJul 14, 2023 - 6:15 p.m.

CVE-2023-32760

2023-07-1418:15:09
CWE-668
mitre
web.nvd.nist.gov
2455
archer platform
cve-2023-32760
api
data feeds
data publication
information security

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

28.0%

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication.

Affected configurations

Nvd
Node
archerirmarcherRange<6.12.0.6
VendorProductVersionCPE
archerirmarcher*cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

28.0%

Related for CVE-2023-32760