Lucene search
HistoryAug 25, 2022 - 11:15 p.m.
CVE-2022-37316
archer platform
6.8
6.11
api access control
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 (6.10.0.3.1) is also a fixed release.
Affected configurations
Node
rsaarcherRange6.8–6.10.0.3.1
ORrsaarcherRange6.11–6.11.0.3
Related
prion
prion
Improper access control
2022-08-25 23:15:00
cvelist
cvelist
CVE-2022-37316
2022-08-25 22:49:00
cve
cve
CVE-2022-37316
2022-08-25 23:15:08
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
Related for NVD:CVE-2022-37316