CVE-2018-1220 Open redirect in EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8
Remote attackers can redirect users to phishing sites via the QuickLinks feature, potentially stealing sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-1220?
CVE-2018-1220 is a medium-severity vulnerability in EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8, published on 8 Mar 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
EMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks feature. A remote attacker may potentially exploit this vulnerability to redirect genuine users to phishing websites with the intent of obtaining sensitive information from the users.
Weakness: CWE-601
Which versions are affected by CVE-2018-1220?
It affects 1 product.
Products include Emc Rsa Archer.
How do I fix CVE-2018-1220?
No fix has been published for CVE-2018-1220 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-1220 being exploited?
There is no known exploitation of CVE-2018-1220 in the wild and no public exploit code.
Other vulnerabilities in EMC RSA Archer GRC Platform RSA Archer versions prior to 6.2.0.8
Sources
Also known as GHSA-h5pq-6h5f-x885.