CVE-2022-37316

—

CVSS 3.1

6.5 medium

EPSS

<1%p50

Published

Aug 25, 2022 (Aug 25, 2022)

Modified

Jun 17, 2026

Description

Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 (6.10.0.3.1) is also a fixed release.

Vendors: rsa
Products: archer
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.