Riskcovery

CVE-2023-22232

Adobe Connect Improper Access Control Security feature bypass

State
Published
Severity
5.3 Medium
Published
Feb 17, 2023
Updated
Mar 5, 2025
Reserved
Dec 19, 2022

Read the record on cve.org

Description

Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nadobe

Weaknesses

  • CWE-284 Improper Access Control (CWE-284)

Affected Products

ProductVersions
ConnectAdobe
  • 11.4.5 and earlierAffected
  • 12.1.5 and earlierAffected
  • None and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.