Adobe Connectの更新、脆弱性20件以上で修正版あり
Summary
Adobe Connectの更新で、認証なしで到達できるものを含む脆弱性が少なくとも20件修正されました。Windowsで自社運用している組織は、版を確認して系列ごとの修正版へ更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Adobe Connectの更新で、認証なしで到達できるものを含む脆弱性が少なくとも20件修正されました。Windowsで自社運用している組織は、版を確認して系列ごとの修正版へ更新してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| AdobeAdobe Connect |
≤ 12.12→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- web psirt@adobe.com