Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-88gm-r293-5r4m

Опубликовано: 15 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.

Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.

EPSS

Процентиль: 82%
0.01723
Низкий

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
nvd
около 4 лет назад

Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.

CVSS3: 4.3
fstec
около 4 лет назад

Уязвимость программ просмотра и редактирования PDF-файлов Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, связанная с раскрытием информации, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 82%
0.01723
Низкий

Дефекты

CWE-200