What is CVE-2022-30584?

CVE-2022-30584 is a critical-severity vulnerability in Rsa Archer. CVSS score: 9.6/10. Published 2022-05-26.

How severe is CVE-2022-30584?

Critical severity. CVSS v3 base score is 9.6 out of 10.

Vulnerability in Rsa Archer

CVE-2022-30584

Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Improper Access Control Vulnerability within SSO ADFS functionality that could potentially be exploited by malicious users to compromise the affected system. 6.10 P3 (6.10.0.3) and 6.9 SP3 P4 (6.9.3.4) are also fixed releases.

EPSS: 0.010 (58.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Rsa Archer
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Release Notes, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-30584?: CVE-2022-30584 is a critical-severity vulnerability in Rsa Archer. CVSS score: 9.6/10. Published 2022-05-26.
How severe is CVE-2022-30584?: Critical severity. CVSS v3 base score is 9.6 out of 10.