Archer Platform Multiple Vulnerabilities Advisory (CVE-2024-49208/49209/49210/49211)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Archer Update for Multiple Vulnerabilities 2. Publisher: MegONeil, Archer Employee 3. Affected Products: Archer Platform versions greater than 6 4. Vulnerability Types: - Authorization Bypass Vulnerability - CVE-2024-49208 - API Authorization Bypass Vulnerability - CVE-2024-49209 - Reflected Cross-site Scripting Vulnerability - CVE-2024-49211 - Reflected Cross-site Scripting Vulnerability - CVE-2024-49210 5. Severity: Medium 6. Vulnerability Description: - Authorization Bypass Vulnerability: Remote unauthenticated attackers can exploit this vulnerability to escalate privileges and delete system icons. - API Authorization Bypass Vulnerability: Remote unauthenticated attackers can exploit this vulnerability to escalate privileges and upload additional system icons. - Reflected Cross-site Scripting Vulnerability: Remote unauthenticated attackers can exploit this vulnerability by tricking victim application users into providing malicious HTML or JavaScript code to the vulnerable web application, which then reflects the malicious code back to the victim and executes it in the context of the web browser. 7. Recommended Remediation: - For CVE-2024-49208: Upgrade to Archer version 2024.08 or higher. - For CVE-2024-49209: Upgrade to Archer version 2024.09 or higher. - For CVE-2024-49211: Upgrade to Archer version 2024.08 or higher. - For CVE-2024-49210: Upgrade to Archer version 2024.09 or higher. 8. EOPS Policy: Archer has a defined main support policy applicable to all major versions. 9. Legal Information: Archer advises all users to determine the applicability of the information based on their specific circumstances and take appropriate action. The information is provided "as is" without any warranty, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement. This information helps users understand the nature, scope of impact, and how to resolve these vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Archer Platform Multiple Vulnerabilities Advisory (CVE-2024-49208/49209/49210/49211)