9.8

CVE-2024-30299

Tenable Vulnerability Disclosure | API Auth Bypass

Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Framemaker Publishing Server Version 2020 Update -
Adobe ≫ Framemaker Publishing Server Version 2020 Update update1
Adobe ≫ Framemaker Publishing Server Version 2020 Update update2
Adobe ≫ Framemaker Publishing Server Version 2020 Update update3
Adobe ≫ Framemaker Publishing Server Version 2022 Update -
Adobe ≫ Framemaker Publishing Server Version 2022 Update update1
Adobe ≫ Framemaker Publishing Server Version 2022 Update update2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.05% 0.598
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Adobe 10 3.9 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-38.html
Vendor Advisory