CVE-2017-5002: emc rsa_archer_egrc Open Redirect
Vulnerability summary
CVE-2017-5002 is a medium (CVSS 6.1) Open Redirect vulnerability in emc rsa_archer_egrc. EPSS estimates a 1.15% chance of exploitation in the next 30 days, higher than 66.5% of scored vulnerabilities.
Timeline
- 07-07-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal the victims' credentials and silently authenticate them to the RSA Archer application without the victims realizing an attack occurred.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.15%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
-0.25 pp
From 1.40% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Emc1 product
- rsa_archer_egrc5.4.1.3 | 5.5.1.1 | 5.5.1.3.1 | 5.5.2 | 5.5.2.3 | 5.5.3.1
1 vendor · 1 product