Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-43716 EUVD-2024-40665GHSA-cwgg-cf4g-662h

Adobe Experience Manager | Improper Access Control (CWE-284)

Published Dec 10, 2024 · Updated Jan 7, 2025 · Assigned by adobe

Description

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

Affected products

VendorProductAffectedFixed
Adobe Adobe Experience Manager ≤ 6.5.21 —

Advisories 1

References