Description
In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct Object Reference (IDOR) issue and retrieve sensitive data.
Unscored
CVE-2021-38362
EUVD-2021-24815GHSA-gf9w-rf5f-3wcr
In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to …
Published Mar 30, 2022 · Updated Aug 4, 2024 · Assigned by mitre