PT-2016-4487 · Adobe · Dispatcher+1

Publicado 2016-02-10 · Atualizado 2016-02-25 · CVE-2016-0957

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 5.6.1, 6.0.0, and 6.1.0 through versions prior to 4.1.5 of Dispatcher

Description The issue is related to the improper implementation of a URL filter in Dispatcher, which allows remote attackers to bypass dispatcher rules.

Recommendations For Adobe Experience Manager versions 5.6.1, 6.0.0, and 6.1.0, update Dispatcher to version 4.1.5 or later. At the moment, there is no additional information about other mitigation measures for this issue.

Correção

Identificadores relacionados

CVE-2016-0957

Produtos afetados

Experience Manager

Dispatcher

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-0957 · Aviso do Fabricante
• https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0957 · Nota de Segurança