CVE-2024-54038

CWE-284 — Improper Access Control3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 59.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe ConnectAdobe Adobe Connect
Timeline
PublishedDec 10

Description

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDadobe/connect12.0 — 12.7+1
▶CVEListV5adobe/adobe_connect11.4.7

🔴Vulnerability Details

2
CVEList
Adobe Connect | Improper Access Control (CWE-284)↗2024-12-10
▶
GHSA
GHSA-2qhr-g294-85mf: Adobe Connect versions 12↗2024-12-10
▶
CVE-2024-54038 (MEDIUM CVSS 4.3) | Adobe Connect versions 12.6 | cvebase.io