SecuriTricks - CVE-2024-41849

Description

Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. An low-privileged attacker could leverage this vulnerability to slightly affect the integrity of the page. Exploitation of this issue requires user interaction and scope is changed.

Product(s) Impacted

Vendor	Product	Versions
Adobe	Experience Manager	*

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	adobe	experience_manager	/	/	/	/	/	/	/	/
a	adobe	experience_manager	/	/	/	/	aem_cloud_service	/	/	/

References

https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html

CVSS Score

4.1 / 10

CVSS Data

Attack Vector: NETWORK
Attack Complexity: LOW
Privileges Required: LOW
Scope: CHANGED
Confidentiality Impact: NONE
Integrity Impact: LOW
Availability Impact: NONE

View Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

Date

Published: Aug. 23, 2024, 5:15 p.m.
Last Modified: Aug. 26, 2024, 2:37 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@adobe.com

CVE-2024-41849