CVE-2023-44324

CVSS V2 None CVSS V3 None

Description

Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthenticated attacker can abuse this vulnerability to access the API and leak default admin's password. Exploitation of this issue does not require user interaction.

Overview

CVE ID
CVE-2023-44324

Assigner
adobe

Vulnerability Status
PUBLISHED

Published Version
2023-11-17T12:27:08.996Z

Last Modified Date
2024-03-15T16:38:35.947Z

Weakness Enumerations

CWE	URL
CWE-287	http://cwe.mitre.org/data/definitions/287.html

References

Reference URL	Reference Tags
https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb23-58.html	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-44324
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44324

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 12:15:21				Added to TrackCVE