CVEvulnerability

CVE-2017-5002

6.1 MEDIUM Published 2017-07-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred.

Affected configurations

• emc rsa archer egrc 5.4.1.3 • emc rsa archer egrc 5.5.1.1 • emc rsa archer egrc 5.5.1.3.1 • emc rsa archer egrc 5.5.2 • emc rsa archer egrc 5.5.2.3 • emc rsa archer egrc 5.5.3.1

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References