PT-2021-3427 · Adobe · Experience Manager

Published 2021-05-11 · Updated 2022-10-21 · CVE-2021-21083

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.3.3.8 and earlier Adobe Experience Manager versions 6.4.8.3 and earlier Adobe Experience Manager versions 6.5.7.0 and earlier Adobe Experience Manager Cloud Service

Description The issue is related to improper access control in the system, which can be exploited by an unauthenticated attacker to cause a denial-of-service attack. This can be done remotely.

Recommendations For Adobe Experience Manager versions 6.3.3.8 and earlier, update to a version that includes the fix for the improper access control issue. For Adobe Experience Manager versions 6.4.8.3 and earlier, update to a version that includes the fix for the improper access control issue. For Adobe Experience Manager versions 6.5.7.0 and earlier, update to a version that includes the fix for the improper access control issue. For Adobe Experience Manager Cloud Service, apply the necessary configuration changes or updates provided by Adobe to address the improper access control issue.

Fix

DoS

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2021-03279

CVE-2021-21083

Affected Products

Experience Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-21083 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21083 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03279 · Security Note
• https://helpx.adobe.com/security/products/experience-manager/apsb21-15.html · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2021051214 · Note