Описание
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
8.6 High
CVSS3
Дефекты
Связанные уязвимости
Adobe Experience Manager is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.
Уязвимость системы управления контентом и медиа-данными Adobe Experience Manager, связанная с отсутствием аутентификации для критичной функции, позволяющая нарушителю обойти существующие механизмы безопасности и получить несанкционированный доступ к защищаемой информации
EPSS
8.6 High
CVSS3