CVE-2017-5002

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred.

• CWE-601

• http://seclists.org/fulldisclosure/2017/Jun/49Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/99354Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038815Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Jun/49Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/99354Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038815Third Party Advisory, VDB Entry

Published

Jul 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-4996Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-4997EMC VASA Provider Virtual Appliance versions 8.3.x and prior…9.8
• CVE-2017-4998EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
• CVE-2017-4999EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
• CVE-2017-5000EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
• CVE-2017-5001EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, …
• CVE-2017-5003EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.…6.1
• CVE-2017-5004EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.…5.4
• CVE-2017-5005Stack-based buffer overflow in Quick Heal Internet Security …9.8
• CVE-2017-5006Blink in Google Chrome prior to 56.0.2924.76 for Linux, Wind…
• CVE-2017-5007Blink in Google Chrome prior to 56.0.2924.76 for Linux, Wind…
• CVE-2017-5008Blink in Google Chrome prior to 56.0.2924.76 for Linux, Wind…