CVE-2023-44324: ZDI-CAN-21344: Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability
First published: Fri Nov 17 2023(Updated: )
Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthenticated attacker can abuse this vulnerability to access the API and leak default admin's password. Exploitation of this issue does not require user interaction.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Adobe FrameMaker Publishing Server | <2022 | |
| Adobe FrameMaker Publishing Server | =2022 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Adobe FrameMaker vulnerability?
The vulnerability ID for this Adobe FrameMaker vulnerability is CVE-2023-44324.
What is the title of this Adobe FrameMaker vulnerability?
The title of this Adobe FrameMaker vulnerability is ZDI-CAN-21344: Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability.
What is the severity level of CVE-2023-44324?
The severity level of CVE-2023-44324 is critical with a severity value of 9.8.
What software versions are affected by this vulnerability?
Adobe FrameMaker versions 2022 and earlier are affected by this vulnerability.
How can an attacker exploit this vulnerability?
An unauthenticated attacker can abuse this vulnerability to access the API and leak the default admin's password.
- agent/type
- agent/event
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/title
- agent/author
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe framemaker publishing server
- version/adobe framemaker publishing server/2022
- vendor/microsoft
- canonical/microsoft windows