Adobe Connect CVE-2015-0344 Cross Site Scripting Vulnerability
BID:75188
Info
Adobe Connect CVE-2015-0344 Cross Site Scripting Vulnerability
| Bugtraq ID: | 75188 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0344 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2015 12:00AM |
| Updated: | Jun 13 2015 12:00AM |
| Credit: | Adobe |
| Vulnerable: |
Adobe Connect 9.3 |
| Not Vulnerable: |
Adobe Connect 9.4 |
Discussion
Adobe Connect CVE-2015-0344 Cross Site Scripting Vulnerability
Adobe Connect is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker could exploit this vulnerability to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Adobe Connect prior to 9.4 are vulnerable.
Adobe Connect is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker could exploit this vulnerability to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Adobe Connect prior to 9.4 are vulnerable.
Exploit / POC
Adobe Connect CVE-2015-0344 Cross Site Scripting Vulnerability
To exploit this issue an attacker must entice a victim into following a malicious URI.
To exploit this issue an attacker must entice a victim into following a malicious URI.
Solution / Fix
Adobe Connect CVE-2015-0344 Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.