PT-2006-2626 · Adobe · Livecycle Forum Manager+1

Publicado 2006-04-13 · Atualizado 2017-07-20 · CVE-2006-1628

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:N/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Adobe LiveCycle Workflow version 7.01 Adobe LiveCycle Forum Manager version 7.01

Description: The issue allows users to authenticate and perform privileged actions when their account is marked as "OBSOLETE" but the account is also active within the authentication system.

Recommendations: For Adobe LiveCycle Workflow version 7.01, update the authentication system to correctly handle "OBSOLETE" accounts. For Adobe LiveCycle Forum Manager version 7.01, ensure that accounts marked as "OBSOLETE" are properly deactivated to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2006-1628

Produtos afetados

Livecycle Forum Manager

Livecycle Workflow

Referências · 7

• http://vupen.com/english/advisories/2006/1343 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25779 · Nota
• http://adobe.com/support/techdocs/333036.html · Aviso do Fabricante
• http://secunia.com/advisories/19620 · Aviso do Fabricante
• http://securitytracker.com/id?1015906 · Nota
• http://securityfocus.com/bid/17511 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1628 · Nota de Segurança