| Package | Affected versions | Patched versions |
|---|---|---|
| archer | ≥ 6.1.0.0, < 6.9.3.0.1 | 6.9.3.0.1 |
In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct Object Reference (IDOR) issue and retrieve sensitive data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free