Description
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | Adobe Connect | ≤ 11.4.7 | — |
Advisories 2
- NCSC-2024-0483 Kwetsbaarheden verholpen in Adobe Connect NCSC-NL (Netherlands) · Dec 11, 2024
- WID-SEC-2024-3677 Adobe Creative Cloud Applikationen: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 10, 2024
References
- https://helpx.adobe.com/security/products/connect/apsb24-99.html vendor-advisory