Vulnerability Description
Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Connect | >= 11.0, <= 11.4.5 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-Fi
- https://helpx.adobe.com/security/products/connect/apsb23-05.htmlVendor Advisory
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-Fi
- https://helpx.adobe.com/security/products/connect/apsb23-05.htmlVendor Advisory
FAQ
What is CVE-2023-22232?
CVE-2023-22232 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage th...
How severe is CVE-2023-22232?
CVE-2023-22232 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-22232?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Connect.