Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-43731 EUVD-2024-40680GHSA-2q92-jq5r-m2x3

Adobe Experience Manager | Improper Authorization (CWE-285)

Published Dec 10, 2024 · Updated Jan 7, 2025 · Assigned by adobe

Description

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.

Affected products

VendorProductAffectedFixed
Adobe Adobe Experience Manager ≤ 6.5.21 —

Advisories 1

References