Is CVE-2021-29253 actively exploited?

CVE-2021-29253 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2021-29253?

CVE-2021-29253 has a CVSS score of 5.1 (MEDIUM severity). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

How do I patch CVE-2021-29253?

Patch guidance is available from rsa security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2021-29253.

CVE-2021-29253 - remediation guidance & executive summary

Q: Which products are affected by CVE-2021-29253?

4 products: rsa archer, rsa archer, rsa archer, rsa archer.

Description

The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability. An malicious attacker with access to the Tableau workbook file may obtain access to credential information to use it in further attacks.

CVSS Metrics

Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector: local
Complexity: high
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
Weaknesses: CWE-522 · Insufficiently Protected Credentials

Metadata

Primary Vendor: RSA
Published: 5/26/2021
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

CVE-2021-29253

Description

CVSS Metrics

Metadata

Affected Products

Remediation Guidance

Executive Summary