CVE-2017-4999

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-07 · updated 2026-06-17
Weakness: CWE-200

Description

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an authorization bypass through user-controlled key vulnerability in Discussion Forum Messages. A remote low privileged attacker may potentially exploit this vulnerability to elevate their privileges and view other users' discussion forum messages.

Affected products

RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1: 5.4.1.3, 5.5.1.1, 5.5.1.3.1, 5.5.2, 5.5.2.3, 5.5.3.1

References

http://seclists.org/fulldisclosure/2017/Jun/49
http://www.securityfocus.com/bid/99354
http://www.securitytracker.com/id/1038815
http://seclists.org/fulldisclosure/2017/Jun/49
http://www.securityfocus.com/bid/99354
http://www.securitytracker.com/id/1038815

Get alerted when CVE-2017-4999 or the next vulnerability affects your stack