漏洞标题
N/A
漏洞描述信息
Adobe Document Server for Reader Extensions 6.0 没有提供适当的访问控制,这允许远程登录的用户通过修改 (1) actionID 和 (2) pageID 参数进行特权操作。请注意:由于预订过程中的错误,这个标识符意外地与多个问题相关联。已分配其他 CVE 标识符来处理同一披露所涉及的其他问题。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the (1) actionID and (2) pageID parameters. NOTE: due to an error during reservation, this identifier was inadvertently associated with multiple issues. Other CVE identifiers have been assigned to handle other problems that are covered by the same disclosure.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Adobe Document Server for Reader Extensions多个远程漏洞
漏洞描述信息
Adobe Documet Server for Reader Extensions允许用户与外部组织和人员共享交互式与智能型的Adobe PDF文件。 Adobe Document Server for Reader Extensions中存在多个漏洞,可能允许恶意用户绕过一些安全限制并执行脚本注入攻击,或获取敏感信息或执行跨站脚本攻击。 1) Adobe Document Server for Reader Extensions(ads-readerext)缺少访问控制限制,可能允许已认证用户通过ac
CVSS信息
N/A
漏洞类别
授权问题