PT-2006-2626 · Adobe · Livecycle Forum Manager+1

Published 2006-04-13 · Updated 2017-07-20 · CVE-2006-1628

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:N/AC:H/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Adobe LiveCycle Workflow version 7.01 Adobe LiveCycle Forum Manager version 7.01

Description: The issue allows users to authenticate and perform privileged actions when their account is marked as "OBSOLETE" but the account is also active within the authentication system.

Recommendations: For Adobe LiveCycle Workflow version 7.01, update the authentication system to correctly handle "OBSOLETE" accounts. For Adobe LiveCycle Forum Manager version 7.01, ensure that accounts marked as "OBSOLETE" are properly deactivated to prevent unauthorized access.

Fix

Related Identifiers

CVE-2006-1628

Affected Products

Livecycle Forum Manager

Livecycle Workflow

References · 7

• http://adobe.com/support/techdocs/333036.html · Vendor Advisory
• http://secunia.com/advisories/19620 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1628 · Security Note
• http://vupen.com/english/advisories/2006/1343 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25779 · Note
• http://securitytracker.com/id?1015906 · Note
• http://securityfocus.com/bid/17511 · Note