9

CVE-2022-30670

Escalate Privileges to Server Admin - Robohelp Server

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Robohelp Server Version < 11
   Microsoft ≫ Windows Version -
Adobe ≫ Robohelp Server Version 11 Update -
   Microsoft ≫ Windows Version -
Adobe ≫ Robohelp Server Version 11 Update update1
   Microsoft ≫ Windows Version -
Adobe ≫ Robohelp Server Version 11 Update update2
   Microsoft ≫ Windows Version -
Adobe ≫ Robohelp Server Version 11 Update update3
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.41% 0.701
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Adobe 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

https://helpx.adobe.com/security/products/robohelp-server/apsb22-31.html
Vendor Advisory