Adobe LiveCycle OBSOLETE User Access Validation Vulnerability

Bugtraq ID:	17511
Class:	Access Validation Error
CVE:	CVE-2006-1628
Remote:	Yes
Local:	No
Published:	Apr 13 2006 12:00AM
Updated:	Apr 13 2006 10:17PM
Credit:	Announced by the vendor.
Vulnerable:	Adobe LiveCycle Workflow 7.01 Adobe LiveCycle Form Manager 7.01
Not Vulnerable:

Adobe LiveCycle OBSOLETE User Access Validation Vulnerability


Adobe LiveCycle could allow a user who has been marked OBSOLETE to continue to access LiveCycle content.

LiveCycle Workflow and LiveCycle Form Manager 7.01 are vulnerable.

Adobe LiveCycle OBSOLETE User Access Validation Vulnerability


An exploit is not required.

Adobe LiveCycle OBSOLETE User Access Validation Vulnerability

Solution:

Fixes are available:


Adobe LiveCycle Workflow 7.01

• Adobe Adobe User Management component of Adobe LiveCycle 7.0
  http://www.adobe.com/support/products/enterprise/support_knowledge_cen ter_workflow.html

Adobe LiveCycle Form Manager 7.01

• Adobe Adobe User Management component of Adobe LiveCycle 7.0
  http://www.adobe.com/support/products/enterprise/support_knowledge_cen ter_lc_form_manager.html

Adobe LiveCycle OBSOLETE User Access Validation Vulnerability

References:

• Process management (Adobe)
  
• Security Advisory: LiveCycle information disclosure to OBSOLETE users (Adobe)