CVE-2018-4921 - Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability

Back Back to CVE browser

MEDIUM

Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability

Published May 19, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 3.55%

Description

Adobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure.

Affected products

Vendor n/a Product Adobe Connect 9.7 and earlier Default
n/a
- Version
  Adobe Connect 9.7 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Adobe Connect 9.7 and earlier

n/a

Version	Status	Constraints
Adobe Connect 9.7 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (3)

http://www.securityfocus.com/bid/103393
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040523
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/connect/apsb18-06.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/103393		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040523		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/connect/apsb18-06.html		x_refsource_MISCVendor Advisory