CVE-2017-5000
Last modified
CVE-2017-5000 is a vulnerability of currently unknown severity. EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack.. EPSS estimates a 1.30% chance of exploitation in the next 30 days.
Description
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more focused attack.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Emc | Rsa Archer Egrc | 5.4.1.3 |
| Emc | Rsa Archer Egrc | 5.5.1.1 |
| Emc | Rsa Archer Egrc | 5.5.1.3.1 |
| Emc | Rsa Archer Egrc | 5.5.2 |
| Emc | Rsa Archer Egrc | 5.5.2.3 |
| Emc | Rsa Archer Egrc | 5.5.3.1 |
References
- http://seclists.org/fulldisclosure/2017/Jun/49Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/99354Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038815Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2017/Jun/49Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/99354Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038815Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-5000?
How severe is CVE-2017-5000?
How do I fix CVE-2017-5000?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-4994An issue was discovered in Cloud Foundry Foundation cf-relea…
- CVE-2017-4995An issue was discovered in Pivotal Spring Security 4.2.0.REL…8.1
- CVE-2017-4996Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2017-4997EMC VASA Provider Virtual Appliance versions 8.3.x and prior…9.8
- CVE-2017-4998EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
- CVE-2017-4999EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
- CVE-2017-5001EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
- CVE-2017-5002EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
- CVE-2017-5003EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.…6.1
- CVE-2017-5004EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.…5.4
- CVE-2017-5005Stack-based buffer overflow in Quick Heal Internet Security …9.8
- CVE-2017-5006Blink in Google Chrome prior to 56.0.2924.76 for Linux, Wind…
Are you affected by CVE-2017-5000?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
