VDB
CVE-2024-54035
CVE-2024-54035
PUBLISHED
Es bestehen mehrere Schwachstellen in Adobe Creative Cloud Connect. Diese Schwachstellen sind auf verschiedene Sicherheitslücken zurückzuführen, darunter unsachgemäße Zugriffskontrolle und Reflected XSS-Probleme. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen und Sicherheitsmaßnahmen zu umgehen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe Creative Cloud Connect <12.7 | |
| Adobe | Adobe Creative Cloud Connect <11.4.9 |
Timeline
- Dec 10, 2024 CVE Published
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3677 advisory
- https://helpx.adobe.com/security/products/media-encoder/apsb24-93.html advisory
- https://helpx.adobe.com/security/products/illustrator/apsb24-94.html advisory
- https://helpx.adobe.com/security/products/after_effects/apsb24-95.html advisory
- https://helpx.adobe.com/security/products/animate/apsb24-96.html advisory
- https://helpx.adobe.com/security/products/indesign/apsb24-97.html advisory
- https://helpx.adobe.com/security/products/pdfl-sdk1/apsb24-98.html advisory
- https://helpx.adobe.com/security/products/connect/apsb24-99.html advisory
- https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-100.html advisory
- https://helpx.adobe.com/security/products/substance3d-modeler/apsb24-102.html advisory
- https://helpx.adobe.com/security/products/bridge/apsb24-103.html advisory
- https://helpx.adobe.com/security/products/premiere_pro/apsb24-104.html advisory
- https://helpx.adobe.com/security/products/substance3d_painter/apsb24-105.html advisory