PT-2024-9660 · Adobe · Connect

Published 2024-11-27 · Updated 2025-01-15 · CVE-2024-54051

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.6, 11.4.7 and earlier

Description The issue is related to a URL redirection vulnerability to an untrusted site, also known as an "Open Redirect". This could allow a remote attacker to bypass existing security restrictions by redirecting users to malicious websites. Exploitation of this issue requires user interaction.

Recommendations For Adobe Connect versions 12.6, 11.4.7 and earlier, update to a version that fixes the URL redirection vulnerability to prevent attackers from redirecting users to malicious websites. As a temporary workaround, consider restricting access to untrusted sites to minimize the risk of exploitation. Avoid clicking on suspicious links from Adobe Connect to prevent potential redirection to malicious websites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2024-11372

CVE-2024-54051

Affected Products

Connect

References · 8

• https://bdu.fstec.ru/vul/2024-11372 · Security Note
• https://helpx.adobe.com/security/products/connect/apsb24-99.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-54051 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54051 · Vendor Advisory
• https://t.me/cvedetector/12577 · Telegram Post
• https://reddit.com/r/k12cybersecurity/comments/1hbcecw/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://twitter.com/CVEnew/status/1866864797314322920 · Twitter Post
• https://t.me/cvenotify/104974 · Telegram Post