PT-2021-5986 · Adobe · Experience Manager

Published 2021-12-14 · Updated 2022-01-19 · CVE-2021-43762

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.10.0 and below Adobe Experience Manager's Cloud Service offering

Description The issue is related to insufficient input validation, which could allow a remote attacker to bypass security controls. Sensitive areas of the web application may be exposed through exploitation of this issue.

Recommendations For Adobe Experience Manager versions 6.5.10.0 and below, update to a version above 6.5.10.0 to resolve the issue. For Adobe Experience Manager's Cloud Service offering, contact the vendor for specific guidance on resolving the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability in the Cloud Service offering.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-00505

CVE-2021-43762

Affected Products

Experience Manager

References · 5

• https://bdu.fstec.ru/vul/2022-00505 · Security Note
• https://helpx.adobe.com/security/products/experience-manager/apsb21-103.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43762 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43762 · Security Note
• https://cybersecurity-help.cz/vdb/SB2021121533 · Note