CVE-2024-54038

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@adobe.com

Published

2024-12-10

Last modified

2025-01-07

Weaknesses

CWE-284

Affected products

• Adobe Connect (Adobe)
• Connect (Adobe)

References

• https://helpx.adobe.com/security/products/connect/apsb24-99.html