{"id":"CVE-2023-22232","published":"2023-02-17T00:00:00Z","modified":"2025-03-05T19:26:07Z","title":"Adobe Connect Improper Access Control Security feature bypass","vendor":"Adobe","product":"Connect","tier":"core","eol":null,"affectedVersions":[{"vendor":"Adobe","product":"Connect","versions":[">= unspecified, <= 11.4.5",">= unspecified, <= 12.1.5",">= unspecified, <= None"]}],"description":{"text":"Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.","provenance":"source","from":"CVE.org"},"summary":{"text":"The Improper Access Control flaw in Adobe Connect lies within the product's access control logic, affecting versions 11.4.5 and earlier and 12.1.5 and earlier. An attacker with network access and no privileges or user interaction can bypass a security feature and affect the integrity of a minor feature.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:31Z"},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.83406,"percentile":0.99681,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"ACTUALIZACION | de seguridad disponible para Adobe Connect","url":"https://otx.alienvault.com/pulse/63ed4641233889cbd248083a","created":"2023-02-15"}],"provenance":"machine"},"cwes":[{"id":"CWE-284","name":"Improper Access Control"}],"references":[{"url":"https://helpx.adobe.com/security/products/connect/apsb23-05.html","tags":[]},{"url":"http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-26396","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-26396","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":49550,"url":"https://www.exploit-db.com/exploits/49550","title":"Adobe Connect 10 - Username Disclosure","type":"webapps","platform":"multiple","date":"2021-02-09","verified":false,"provenance":"source"},{"id":51327,"url":"https://www.exploit-db.com/exploits/51327","title":"Adobe Connect 11.4.5 - Local File Disclosure","type":"webapps","platform":"multiple","date":"2023-04-08","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2021-02-09"},"nuclei":[{"id":"CVE-2023-22232","name":"Adobe Connect < 12.1.5 - Local File Disclosure","severity":"medium","path":"http/cves/2023/CVE-2023-22232.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22232.yaml"}],"first":{"date":"2021-02-09","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/49550"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html"],"flow":[],"timeline":[{"date":"2021-02-09","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-49550)","url":"https://www.exploit-db.com/exploits/49550","provenance":"source"},{"date":"2023-02-17","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-22232","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":29.3,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.94,"detail":"percentile 0.9968"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 Exploit-DB entries; 1 NVD exploit link; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":3.71,"detail":"base score 5.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}