{"id":"CVE-2023-22232","aliases":["EUVD-2023-26396","GHSA-c489-pr63-mrv9"],"status":"published","title":"Adobe Connect Improper Access Control Security feature bypass","description":"Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.83406,"percentile":0.99685,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-284"],"published":"2023-02-17T00:00:00Z","modified":"2026-06-17T05:34:50Z","exploits":[{"source":"exploitdb","id":"EDB-49550","title":"Adobe Connect 10 - Username Disclosure","type":"webapps","platform":"multiple","date":"2021-02-09","url":"https://www.exploit-db.com/exploits/49550"},{"source":"exploitdb","id":"EDB-51327","title":"Adobe Connect 11.4.5 - Local File Disclosure","type":"webapps","platform":"multiple","date":"2023-04-08","url":"https://www.exploit-db.com/exploits/51327"},{"source":"nuclei","id":"CVE-2023-22232","title":"Adobe Connect \u003c 12.1.5 - Local File Disclosure","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22232.yaml"}],"products":[{"vendor":"adobe","product":"connect"},{"vendor":"tanium","product":"connect"}],"references":[{"url":"https://helpx.adobe.com/security/products/connect/apsb23-05.html","tags":["x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22232"},{"url":"https://github.com/advisories/GHSA-c489-pr63-mrv9"}],"sources":{"cve":[{"id":"CVE-2023-22232","title":"Adobe Connect Improper Access Control Security feature bypass","description":"Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.","status":"published","published":"2023-02-17T00:00:00Z","modified":"2025-03-05T19:26:07.178Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:15.779187Z"}],"euvd":[{"id":"EUVD-2023-26396","description":"Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.","status":"published","published":"2023-02-17T00:00:00Z","modified":"2025-03-05T19:26:07Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:12.397755Z"}],"ghsa":[{"id":"GHSA-c489-pr63-mrv9","title":"Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper...","description":"Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.","status":"published","published":"2023-02-18T00:31:59Z","modified":"2023-03-20T15:30:20Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:54:21.862765Z"}],"nvd":[{"id":"CVE-2023-22232","description":"Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.","status":"published","published":"2023-02-17T22:15:13.533Z","modified":"2026-06-17T05:34:50.79Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:07:47.623983Z"}]}}