Vulnerability Details : CVE-2021-29253
The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability. An malicious attacker with access to the Tableau workbook file may obtain access to credential information to use it in further attacks.
Products affected by CVE-2021-29253
- cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*
- cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*
- cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*
- cpe:2.3:a:rsa:archer:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-29253
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 10 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-29253
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
3.9
|
2.9
|
NIST | |
5.1
|
MEDIUM | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
1.4
|
3.6
|
MITRE | |
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2021-29253
-
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-29253
-
https://www.rsa.com/en-us/company/vulnerability-response-policy
Vulnerability Response PolicyVendor Advisory
-
https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223
RSA-2021-04: Archer, An RSA Business, Update for Multiple Vulnerabilities - RSA Link - 603223Vendor Advisory
Jump to