VulnerabilityModified
CVE-2023-22232
Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass.
MEDIUM 5.3EPSS 81.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 81.9%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 81.88% probability · 100th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- adobe/connect
- Source
- psirt@adobe.com
References
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html
- https://helpx.adobe.com/security/products/connect/apsb23-05.htmlVendor Advisory
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html
- https://helpx.adobe.com/security/products/connect/apsb23-05.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.