CVE-2021-28626
Adobe Experience Manager Improper Authorization at /content/usergenerated
Vexday Risk Score
8Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 3.7EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
24 ago 2021Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue does not require user interaction.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Adobe · Experience ManagerQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →