Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct Object Reference (IDOR) issue and retrieve sensitive data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RSA Archer 安全漏洞
Vulnerability Description
RSA Archer是英国RSA公司的一款企业IT治理和合规治理的产品，包括策略、风险和合规定义和管理。它能够把我们所有的企业资产，还有一些监测到的信息全部汇总，整理到统一的平台之上，给出具有业务层面参考的价值，以及一些操作的智能和综合的管理。 RSA Archer 6.x版本至6.9 SP3 (6.9.3.0)版本存在安全漏洞，该漏洞源于易受不安全的直接对象引用（IDOR）问题攻击。攻击者利用该漏洞的REST API端点发出GET请求，并检索敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A