CVE-2020-29538 Information disclosure in n/a
Remote authenticated administrators can exploit improper API access controls to gather sensitive system information for subsequent attacks.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-29538?
CVE-2020-29538 is a medium-severity vulnerability in n/a, published on 29 Jan 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks.
Which versions are affected by CVE-2020-29538?
It affects 1 product.
Products include Rsa Archer.
How do I fix CVE-2020-29538?
No fix has been published for CVE-2020-29538 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-29538 being exploited?
There is no known exploitation of CVE-2020-29538 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-xff9-cgjh-mvpp.