VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Sep 18, 2019· Updated Jun 17, 2026

CVE-2019-3758

CVE-2019-3758

Description

RSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability. The vulnerability allows sysadmins to create user accounts with insufficient credentials. Unauthenticated attackers could gain unauthorized access to the system using those accounts.

Affected products

3
  • Rsa/Archerllm-fuzzy2 versions
    <6.6 P2 (6.6.0.2)+ 1 more
    • (no CPE)range: <6.6 P2 (6.6.0.2)
    • cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*range: <6.6.0.2
  • Dell/RSA Archercpe-rescue
    Range: prior to 6.6 P2 (6.6.0.2)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.