CVEvulnerability
CVE-2023-22232
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-02-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-284
Description
Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.
Affected configurations
• adobe connect (>= 11.0 <= 11.4.5)
• adobe connect (>= 12.0 <= 12.1.5)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html packetstormsecurity.com
- https://helpx.adobe.com/security/products/connect/apsb23-05.html Vendor Advisory
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html packetstormsecurity.com
- https://helpx.adobe.com/security/products/connect/apsb23-05.html Vendor Advisory