Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-43729 EUVD-2024-40678GHSA-jr48-jpv6-pmh8

Adobe Experience Manager | Improper Authorization (CWE-285)

Published Dec 10, 2024 · Updated Jan 7, 2025 · Assigned by adobe

Description

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a high impact on integrity. Exploitation of this issue does not require user interaction.

Affected products

VendorProductAffectedFixed
Adobe Adobe Experience Manager ≤ 6.5.21 —

Advisories 1

References