CVE Catalog

CVE-2023-37224

MediumCVSS 6.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

7th percentile - higher than 7% of all known CVEs

Summary

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files.

Risk Assessment

An attacker with appropriate permissions can access confidential data, potentially leading to breaches of privacy and security for the organization.

Recommendation

It is recommended to update the Archer Platform to version 6.12.0.6 or 6.13.0 to mitigate this vulnerability.

Original NVD description (English source)

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS