CVE-2018-1219

EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can potentially exploit this vulnerability to gather information about the user base and may use this information in subsequent attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
VendorProductVersion
emcrsa_archer
𝑥
< 6.2.0.8
𝑥
= Vulnerable software versions
References
http://seclists.org/fulldisclosure/2018/Mar/12
http://www.securityfocus.com/bid/103319
http://www.securitytracker.com/id/1040457
http://seclists.org/fulldisclosure/2018/Mar/12
http://www.securityfocus.com/bid/103319
http://www.securitytracker.com/id/1040457