CVE-2022-30683CWE-657

AEM Violation of Secure Design Principles Security feature bypass

Medium · published September 16, 2022

CVSS v3.0
5.3
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a Violation of Secure Design Principles vulnerability that could lead to bypass the security feature of the encryption mechanism in the backend . An attacker could leverage this vulnerability to decrypt secrets, however, this is a high-complexity attack as the threat actor needs to already possess those secrets. Exploitation of this issue requires low-privilege access to AEM.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.9th percentile
Weakness
CWE-657 · Violation of Secure Design Principles
Published
2022-09-16T17:45Z
EPSS history
Timeline
  • 16 SEP 17:45Z
    AEM Violation of Secure Design Principles Security feature bypass
    cvelistv5