CVE-2020-5331 Information disclosure in RSA Archer
Authenticated local users can access session information from cache or log files, potentially enabling further attacks against RSA Archer.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5331?
CVE-2020-5331 is a high-severity vulnerability in Dell RSA Archer, published on 4 May 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an information exposure vulnerability. Users’ session information could potentially be stored in cache or log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.
Which versions are affected by CVE-2020-5331?
It affects 1 product.
Products include Rsa Archer.
How do I fix CVE-2020-5331?
No fix has been published for CVE-2020-5331 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-5331 being exploited?
There is no known exploitation of CVE-2020-5331 in the wild and no public exploit code.
Other vulnerabilities in Dell RSA Archer
Sources
Also known as GHSA-gjc9-vw3q-w437.