Adobe Experience Manager | Improper Access Control (CWE-284)

CVE-2024-43716

Summary

Adobe Experience Manager versions 6.5.21 and earlier are impacted by an Improper Access Control vulnerability, which facilitates a Security feature bypass. This flaw allows an attacker to circumvent established security measures without requiring any user interaction. As a result, unauthorized access can be obtained, potentially leading to critical data exposure or manipulation. Organizations using affected versions are urged to apply recommended security updates to mitigate these risks. For more information and guidance, check Adobe's vendor advisory.

References