Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-28579 EUVD-2021-15251GHSA-c924-xxqf-59v3

Adobe Connect improper access control could lead to privilege escalation

Published Jun 28, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participants.

Affected products

VendorProductAffectedFixed
Adobe Connect unspecified – ≤ 11.2.1, unspecified – ≤ None —

References