PT-2021-5511 · Adobe · Campaign

Published 2021-11-17 · Updated 2022-02-03 · CVE-2021-40745

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Campaign versions 21.2.1 and earlier

Description The issue is related to a Path Traversal vulnerability that could allow an unauthenticated attacker to read arbitrary server files by leveraging an exposed XML file. This can lead to the enumeration of other files on the server, potentially resulting in unauthorized access to protected information.

Recommendations For Adobe Campaign version 21.2.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2021-06361

CVE-2021-40745

Affected Products

Campaign

References · 5

• https://osv.dev/vulnerability/CVE-2021-40745 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40745 · Security Note
• https://bdu.fstec.ru/vul/2021-06361 · Security Note
• https://helpx.adobe.com/security/products/campaign/apsb21-52.html · Vendor Advisory
• https://t.me/cibsecurity/32522 · Telegram Post