CVEvulnerability
CVE-2025-61830
7.1 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-11-11
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-863
Description
Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install a malicious SDK.
Affected configurations
• adobe pass authentication (< 3.8.0)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://helpx.adobe.com/security/products/pass/apsb25-112.html Vendor Advisory