CVE-2021-28579CWE-284

Adobe Connect improper access control could lead to privilege escalation

Medium · published June 28, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participants.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01088 · 65.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-06-28T14:13Z
EPSS history
Timeline
  • 28 JUN 14:13Z
    Adobe Connect improper access control could lead to privilege escalation
    cvelistv5