CVE-2017-11291: SSRF
First published: Sat Dec 09 2017(Updated: )
An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass network access controls.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Connect | <=9.6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-11291?
CVE-2017-11291 is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Connect 9.6.2 and earlier versions.
How can this vulnerability be exploited?
This vulnerability can be abused to bypass network access controls.
How severe is CVE-2017-11291?
CVE-2017-11291 is considered critical with a severity value of 10.
What is the affected software?
The affected software is Adobe Connect 9.6.2 and earlier versions.
Is there a fix available for this vulnerability?
Yes, Adobe has released a security update to address the vulnerability. Please refer to the references for more information.
- collector/nvd-index
- vendor/adobe
- canonical/adobe connect
- version/adobe connect/9.6.2