CVE-2024-34092

HIGH

Archer Platform <2024.04 - Privilege Escalation

Title source: llm

Description

An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.

References (2)

[Product] https://archerirm.com

[Vendor Advisory] https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963

Scores

CVSS v3 8.8

EPSS 0.0015

EPSS Percentile 34.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-613

Status published

Products (2)

archerirm/archer 2024.03

archerirm/archer < 6.14.0.3

Published May 06, 2024

Tracked Since Feb 18, 2026