CVE-2024-54038: Adobe Connect | Improper Access Control (CWE-284)

Q: What is the severity of CVE-2024-54038?

CVE-2024-54038 has a low severity rating, indicating a low impact on confidentiality.

Q: How do I fix CVE-2024-54038?

To fix CVE-2024-54038, users should upgrade to Adobe Connect version 12.7 or later.

Q: Who is affected by CVE-2024-54038?

CVE-2024-54038 affects Adobe Connect versions 12.6, 11.4.7 and earlier.

Q: What type of vulnerability is CVE-2024-54038?

CVE-2024-54038 is categorized as an Improper Access Control vulnerability.

Q: What could an attacker achieve by exploiting CVE-2024-54038?

A low-privileged attacker could leverage CVE-2024-54038 to bypass security measures with low impact.

Published Dec 10, 2024

Updated

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

Affected Software

2 affected components

Adobe Connect<11.4.9

Adobe Connect>=12.0<12.7

Event History

Dec 10, 2024

CVE Published

via MITRE·08:42 PM

Data Sourced

via MITRE·08:42 PM

DescriptionSeverityWeakness

Jun 13, 56938

Event

via NVD·12:51 AM

Frequently Asked Questions

What is the severity of CVE-2024-54038?

CVE-2024-54038 has a low severity rating, indicating a low impact on confidentiality.

How do I fix CVE-2024-54038?

To fix CVE-2024-54038, users should upgrade to Adobe Connect version 12.7 or later.

Who is affected by CVE-2024-54038?

CVE-2024-54038 affects Adobe Connect versions 12.6, 11.4.7 and earlier.

What type of vulnerability is CVE-2024-54038?

CVE-2024-54038 is categorized as an Improper Access Control vulnerability.

What could an attacker achieve by exploiting CVE-2024-54038?