Back to overview

CVE-2024-30299

CRITICAL
10.0
CVSS 3.1
Description
Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.

Metadata

CVE ID
CVE-2024-30299
State
PUBLISHED
Assigner
adobe
Reserved
2024-03-26 16:04 UTC
Published
2024-06-13 11:24 UTC
Last updated
2024-08-02 01:32 UTC
Primary CWE
CWE-287
Improper Authentication (CWE-287)
Vendor / Product
Adobe / Adobe Framemaker Publishing Server
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
Adobe Adobe Framemaker Publishing Server — 0 ≤ 2022.2
Weakness (CWE)
CWESourceDescription
CWE-287 cna Improper Authentication (CWE-287)
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References (1)
Back to overview