Description
Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.
Metrics
CVSS 3.1 5.3/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Connect | >= unspecified, <= 11.4.5; >= unspecified, <= 12.1.5; >= unspecified, <= None |
References
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html
- https://helpx.adobe.com/security/products/connect/apsb23-05.htmlVendor Advisory
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html
- https://helpx.adobe.com/security/products/connect/apsb23-05.htmlVendor Advisory
Timeline
- Published
- Feb 17, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified