Уязвимость утечки сессионных токенов в Adobe Flash Player, Adobe AIR и Adobe AIR SDK на Windows, OS X и Linux
Описание
Уязвимость позволяет злоумышленникам получать доступ к сессионным токенам через неуточненные векторы.
Затронутые версии ПО
- Adobe Flash Player: до 13.0.0.252, 14.x и 15.x до 15.0.0.223 на Windows и OS X, и до 11.2.202.418 на Linux
- Adobe AIR: до 15.0.0.356
- Adobe AIR SDK: до 15.0.0.356
- Adobe AIR SDK & Compiler: до 15.0.0.356
Тип уязвимости
Утечка информации
Ссылки
- PatchVendor Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- VDB Entry
- PatchVendor Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- VDB Entry
Уязвимые конфигурации
Одновременно
Одно из
Одно из
Одновременно
EPSS
5 Medium
CVSS2
Дефекты
Связанные уязвимости
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.
EPSS
5 Medium
CVSS2