Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue does not require user interaction.

CVE-2022-42351 is an Incorrect Authorization vulnerability (CWE-863) affecting Adobe Experience Manager (AEM) version 6.5.14 and earlier. This vulnerability arises from improper enforcement of authorization controls within the AEM platform, allowing a low-privileged attacker to bypass security features and access information that should be restricted. Specifically, the flaw enables unauthorized disclosure of low-level confidential information without requiring any user interaction, which implies that exploitation can be automated or performed remotely without social engineering. The vulnerability does not appear to allow privilege escalation or direct system compromise but can leak sensitive data that could be leveraged for further attacks. Adobe Experience Manager is a widely used content management system (CMS) employed by enterprises to manage digital assets and web content, often hosting critical corporate websites and portals. The lack of a patch link suggests that remediation may require applying updates from Adobe or implementing compensating controls. No known exploits are currently reported in the wild, but the presence of this vulnerability in a critical enterprise platform poses a moderate risk, especially in environments where strict access controls and data confidentiality are paramount.

Detailed information about CVE-2022-42351: Incorrect Authorization (CWE-863) in Adobe Experience Manager affecting Adobe Experience Manager. Get real-time updat

CVE-2022-42351: Incorrect Authorization (CWE-863) in Adobe Experience Manager - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-42351: Incorrect Authorization (CWE-863) in Adobe Experience Manager

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account detials. Exploitation of this issue does not require user interaction.

CVE-2022-35692 is an Improper Access Control vulnerability (CWE-863) affecting Adobe Magento Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier, and 2.4.4 and earlier. This vulnerability arises from incorrect authorization checks within the Magento Commerce platform, which is a widely used e-commerce solution. The flaw allows an attacker to bypass security features and access minor information related to other users' account details without requiring any user interaction. Although the leaked information is described as minor, unauthorized disclosure of account details can facilitate further attacks such as social engineering, account takeover attempts, or targeted phishing campaigns. The vulnerability does not require authentication or user interaction, increasing the risk of automated exploitation. However, no known exploits have been reported in the wild to date. The issue stems from improper enforcement of access control policies, which is critical in multi-user web applications like Magento Commerce that handle sensitive customer and transactional data. Given Magento's role in managing e-commerce storefronts, this vulnerability could potentially expose customer data and undermine trust in affected merchants.

Detailed information about CVE-2022-35692: Incorrect Authorization (CWE-863) in Adobe Magento Commerce affecting Adobe Magento Commerce. Get real-time updates, 

Title	Severity	Type	Source	Date

Threats Tagged 'incorrect-authorization-cwe-863'

Filter Threats

Threats Tagged 'incorrect-authorization-cwe-863'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility