by Kastro
Paper/Archive/CVE-2024-26029

CVE-2024-26029

Adobe Adobe Experience Manager — Adobe Experience Manager | Improper Access Control (CWE-284)

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 63.1.631 × 2012.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain disclose information. Exploitation of this issue does not require user interaction.

Affected

ProductAffectedFixed inSource
Adobe Experience Manager≤ 6.5.20–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
adobe (CNA)7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisoryhelpx.adobe.com/security/products/experience-manager/apsb24-28.html