CVE-2020-24441CWE-284

Improper Access Control in Adobe Acrobat Reader for Android

Medium · published November 12, 2020

CVSS v3.1
5.5
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created by the application. This could result in disclosure of sensitive information stored in databases used by the application. Exploitation requires a victim to download and run a malicious application.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02285 · 83.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-11-12T14:34Z
EPSS history
Timeline
  • 12 NOV 14:34Z
    Improper Access Control in Adobe Acrobat Reader for Android
    cvelistv5