Archerirm vulnerabilities
We track 4 vulnerabilities in Archerirm products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2024.
Latest Archerirm vulnerabilities
- 8.8 High severity
An issue was discovered in Archer Platform 6 before 2024.04.
An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.
- 7.5 High severity
archer: Exposure of Sensitive Information to an Unauthorized Actor
Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unauthenticated attacker could potentially obtain access to sensitive information via an internal URL.
- 8.8 High severity
Archer: Authorization Bypass Through User-Controlled Key
Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource r
- 8.0 High severity
Archer: Cross-Site Request Forgery
Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to execute arbitrary code via a crafted request.