CVE-2024-34130: Acrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configuration
Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access confidential information. Exploitation of this issue does not require user interaction.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34130?
CVE-2024-34130 has been rated as a critical vulnerability due to its potential to bypass security features and access confidential information.
How do I fix CVE-2024-34130?
To fix CVE-2024-34130, upgrade Adobe Acrobat Mobile Sign for Android to version 24.5.0.33694 or later.
What versions of Adobe Acrobat are affected by CVE-2024-34130?
Adobe Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by CVE-2024-34130.
Can CVE-2024-34130 be exploited remotely?
Yes, CVE-2024-34130 can be exploited remotely, allowing attackers to access confidential information without local access.
What type of vulnerability is CVE-2024-34130?
CVE-2024-34130 is classified as an Incorrect Authorization vulnerability, leading to a potential security feature bypass.