CWE Code: 601
Vulnerability Type: privilege_escalation
CVSS Score: 5.8
CWE Name:  URL Redirection to Untrusted Site ('Open Redirect')
Summary: emc rsa archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. a remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. the attacker could then steal the victims' credentials and silently authenticate them to the rsa archer application without the victims realizing an attack occurred.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2017-07-07
Last Modified Date: 2017-07-17