CVE-2020-5337

RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.

• CWE-601
• CWE-601

• https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-VulnerabilitiesThird Party Advisory
• https://www.dell.com/support/security/en-us/details/DOC-111112/DSA-2020-049-RSA-Archer-Security-Update-for-Multiple-VulnerabilitiesThird Party Advisory

Published

May 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5331RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an i…5.5
• CVE-2020-5332RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a co…7.2
• CVE-2020-5333RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an a…4.3
• CVE-2020-5334RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contains a D…6.1
• CVE-2020-5335RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cr…8.8
• CVE-2020-5336RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a UR…6.1
• CVE-2020-5339RSA Authentication Manager versions prior to 8.4 P10 contain…4.8
• CVE-2020-5340RSA Authentication Manager versions prior to 8.4 P10 contain…4.8
• CVE-2020-5341Deserialization of Untrusted Data Vulnerability Dell EMC Ava…9.8
• CVE-2020-5342Dell Digital Delivery versions prior to 3.5.2015 contain an …7.8
• CVE-2020-5343Dell Client platforms restored using a Dell OS recovery imag…7.8
• CVE-2020-5344Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65…9.8