VULNERABILITY INTELLIGENCE

CVE-2019-3758

CVSS score9.8 CRITICAL
EPSS probability1.46%
CISA KEVNot currently listed
Published2019-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

RSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability. The vulnerability allows sysadmins to create user accounts with insufficient credentials. Unauthenticated attackers could gain unauthorized access to the system using those accounts.

Weakness classification

  • CWE-288: Authentication Bypass Using an Alternate Path or Channel
  • CWE-521: Weak Password Requirements

Primary references