CVE-2024-34130

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access confidential information. Exploitation of this issue does not require user interaction.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html	Patch Vendor Advisory
https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:android:*:*

History

21 Nov 2024, 09:18

Type	Values Removed	Values Added
References	~~() https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html - Patch, Vendor Advisory~~	() https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html - Patch, Vendor Advisory

19 Jul 2024, 17:28

Type	Values Removed	Values Added
CPE		cpe:2.3:a:adobe:acrobat_reader::::::android::*
First Time		Adobe Adobe acrobat Reader
References	~~() https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html -~~	() https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html - Patch, Vendor Advisory

13 Jun 2024, 18:35

Type	Values Removed	Values Added
Summary		(es) Las versiones 24.4.2.33155 y anteriores de Acrobat Mobile Sign para Android se ven afectadas por una vulnerabilidad de autorización incorrecta que podría provocar la omisión de una función de seguridad. Un atacante podría aprovechar esta vulnerabilidad para acceder a información confidencial. La explotación de este problema no requiere la interacción del usuario.

13 Jun 2024, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-13 12:15

Updated : 2024-11-21 09:18

NVD link : CVE-2024-34130

Mitre link : CVE-2024-34130

CVE.ORG link : CVE-2024-34130

JSON object : View

Products Affected

adobe

acrobat_reader

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2024-34130", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@adobe.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2024-06-13T12:15:12.030", "references": [{"url": "https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@adobe.com"}, {"url": "https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@adobe.com", "description": [{"lang": "en", "value": "CWE-863"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access confidential information. Exploitation of this issue does not require user interaction."}, {"lang": "es", "value": "Las versiones 24.4.2.33155 y anteriores de Acrobat Mobile Sign para Android se ven afectadas por una vulnerabilidad de autorizaci\u00f3n incorrecta que podr\u00eda provocar la omisi\u00f3n de una funci\u00f3n de seguridad. Un atacante podr\u00eda aprovechar esta vulnerabilidad para acceder a informaci\u00f3n confidencial. La explotaci\u00f3n de este problema no requiere la interacci\u00f3n del usuario."}], "lastModified": "2024-11-21T09:18:09.857", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "8A0D505F-8E91-4C40-911A-C42E43A91E93", "versionEndExcluding": "24.5.0.33694"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@adobe.com"}