CVE-2019-3758: Rsa Archer

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

RSA Archer, versions prior to 6.6 P2 (6.6.0.2), contain an improper authentication vulnerability. The vulnerability allows sysadmins to create user accounts with insufficient credentials. Unauthenticated attackers could gain unauthorized access to the system using those accounts.

Affected products

• Rsa Archer: before 6.6.0.2 (fixed in 6.6.0.2)

Published 2019-09-18. Last modified 2026-06-17.