CVE-2021-38362

CVE-2021-38362 is an Insecure Direct Object Reference (IDOR) vulnerability affecting RSA Archer versions 6.x through 6.9 SP3. An authenticated attacker can exploit this flaw by making a GET request to a vulnerable REST API endpoint, potentially leading to the retrieval of sensitive data. With a CVSS score of 6.5 (Medium), this vulnerability is easily exploitable over the network with low attack complexity and requires only low privileges, resulting in high confidentiality impact. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.