Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Archer | Rsa | 6.6 (including) | 6.6.0.8 (excluding) |
| Archer | Rsa | 6.7 (including) | 6.7.0.8 (excluding) |
| Archer | Rsa | 6.8 (including) | 6.8.0.5 (excluding) |
| Archer | Rsa | 6.9 (including) | 6.9.0.1 (excluding) |