PT-2024-9659 · Adobe · Connect

Published 2024-11-27 · Updated 2025-01-15 · CVE-2024-54050

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.6, 11.4.7 and earlier

Description The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability allows an attacker to redirect users to malicious websites. Exploitation of this issue requires user interaction, meaning the attacker needs the user to perform a specific action to successfully exploit the vulnerability.

Recommendations For Adobe Connect versions 12.6 and earlier, update to a version that is not affected by this issue. For Adobe Connect version 11.4.7 and earlier, update to a version that is not affected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2024-11371

CVE-2024-54050

Affected Products

Connect

References · 8

• https://osv.dev/vulnerability/CVE-2024-54050 · Vendor Advisory
• https://helpx.adobe.com/security/products/connect/apsb24-99.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11371 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-54050 · Security Note
• https://t.me/cvenotify/104973 · Telegram Post
• https://t.me/cvedetector/12572 · Telegram Post
• https://twitter.com/CVEnew/status/1866864789072515335 · Twitter Post
• https://reddit.com/r/k12cybersecurity/comments/1hbcecw/msisac_cybersecurity_advisory_multiple · Reddit Post