PT-2020-5058 · Adobe · Reader Mobile

Published 2020-07-21 · Updated 2020-07-23 · CVE-2020-9663

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Reader Mobile versions 20.0.1 and earlier

Description The issue is related to a directory traversal vulnerability in the program. Successful exploitation could lead to information disclosure. The vulnerability is associated with errors in restricting the path name to a directory with limited access, which could allow a remote attacker to access protected information in the context of the current user.

Recommendations For Adobe Reader Mobile versions 20.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2020-05647

CVE-2020-9663

Affected Products

Reader Mobile

References · 4

• https://helpx.adobe.com/security/products/reader-mobile/apsb20-50.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9663 · Security Note
• https://bdu.fstec.ru/vul/2020-05647 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9663 · Vendor Advisory