CVE-2020-29538

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-29 · updated 2026-06-17

Description

Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks.

Affected products

Dell RSA Archer: from 6.6 before 6.6.0.8; from 6.7 before 6.7.0.8; from 6.8 before 6.8.0.5; from 6.9 before 6.9.0.1 — fixed in 6.6.0.8, 6.7.0.8, 6.8.0.5, 6.9.0.1

How to fix

Upgrade to a fixed version: Dell RSA Archer 6.6.0.8, 6.7.0.8, 6.8.0.5, 6.9.0.1. Check the vendor advisory for mitigations.

References

https://community.rsa.com/docs/DOC-115223
https://www.rsa.com/en-us/company/vulnerability-response-policy
https://community.rsa.com/docs/DOC-115223
https://www.rsa.com/en-us/company/vulnerability-response-policy

Get alerted when CVE-2020-29538 or the next vulnerability affects your stack