Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2018-1220

Quick assessment

Affected
n/a EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

EMC RSA Archer是美国易安信（EMC）公司的一款企业IT治理和合规治理产品。该产品可以制定eGRC计划，用于管理企业风险、实现业务流程自动化等。 EMC RSA Archer 6.2.0.8之前版本中的QuickLinks功能存在安全漏洞。远程攻击者可利用该漏洞将用户重定向到钓鱼网站。

AI Predicted 7.5 Difficulty: Easy EPSS 1.75% · P77

Possible ATT&CK Techniques 1 AI

T1566 · Phishing
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-1220

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
EMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks feature. A remote attacker may potentially exploit this vulnerability to redirect genuine users to phishing websites with the intent of obtaining sensitive information from the users.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
EMC RSA Archer 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EMC RSA Archer是美国易安信（EMC）公司的一款企业IT治理和合规治理产品。该产品可以制定eGRC计划，用于管理企业风险、实现业务流程自动化等。 EMC RSA Archer 6.2.0.8之前版本中的QuickLinks功能存在安全漏洞。远程攻击者可利用该漏洞将用户重定向到钓鱼网站。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8 EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8 -

II. Public POCs for CVE-2018-1220

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-1220

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-1220 (2)

Mailing List Discussions for CVE-2018-1220 (1)

Same Patch Batch · n/a · 2018-03-08 · 47 CVEs total

CVE-2018-7871 libming 缓冲区错误漏洞
CVE-2018-7874 libming 安全漏洞
CVE-2018-7876 libming 安全漏洞
CVE-2014-7272 Simple Desktop Display Manager 权限许可和访问控制漏洞
CVE-2018-5313 Rapid Scada 安全漏洞
CVE-2018-7183 NTP ntpq 缓冲区错误漏洞
CVE-2018-7889 Calibre 安全漏洞
CVE-2018-7890 Zoho ManageEngine Applications Manager 命令注入漏洞
CVE-2014-7271 Simple Desktop Display Manager 安全漏洞
CVE-2018-7872 libming 安全漏洞
CVE-2018-7873 libming 缓冲区错误漏洞
CVE-2018-7870 libming 安全漏洞
CVE-2018-7869 libming 安全漏洞
CVE-2018-7868 libming 缓冲区错误漏洞
CVE-2018-7867 libming 缓冲区错误漏洞
CVE-2018-7866 libming 安全漏洞
CVE-2018-1219 EMC RSA Archer 访问控制错误漏洞
CVE-2018-1216 多款Dell产品vApp Manager 安全漏洞
CVE-2018-1215 多款Dell产品安全漏洞
CVE-2018-1182 多款EMC产品权限许可和访问控制问题漏洞

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8
Same vendor: n/a

V. Comments for CVE-2018-1220

No comments yet

Leave a comment