VULNERABILITY INTELLIGENCE

CVE-2020-5331

CVSS score8.8 HIGH
EPSS probability0.72%
CISA KEVNot currently listed
Published2020-05-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache or log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-598: Use of GET Request Method With Sensitive Query Strings

Primary references