Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the Archer application without the victims realizing an attack occurred.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
RSA Archer 输入验证错误漏洞
Vulnerability Description
RSA Archer是英国RSA公司的一款企业IT治理和合规治理的产品，包括策略、风险和合规定义和管理。它能够把我们所有的企业资产，还有一些监测到的信息全部汇总，整理到统一的平台之上，给出具有业务层面参考的价值，以及一些操作的智能和综合的管理。 Archer 6.x版本至6.9 P2 (6.9.0.2)版本存在安全漏洞，该漏洞源于受到开放重定向漏洞的影响。攻击者利用该漏洞将合法用户重定向到任意网站并进行网络钓鱼攻击，随后攻击者可以窃取受害者的凭据，不让受害者意识到攻击发生并悄悄地向Archer应用程序验证
CVSS Information
N/A
Vulnerability Type
N/A