Medium severity6.5NVD Advisory· Published Mar 30, 2022· Updated Jun 17, 2026
CVE-2021-41594
CVE-2021-41594
Description
In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by intercepting the API request at the /api/V2/internal/TaskPermissions/CheckTaskAccess endpoint. If the parameters of this request are replaced with empty fields, the attacker achieves access to the precluded functions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- RSA/RSA Archerdescription
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.