#VU9193 Server-side request forgery in Adobe Connect - CVE-2017-11291
Published: November 14, 2017
Vulnerability identifier: #VU9193
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2017-11291
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Adobe Connect
Adobe Connect
Software vendor:
Adobe
Adobe
Description
The vulnerability allows a remote user to perform SSRF attack.
The weakness exists due to unknown error. A remote attacker can perform SSRF attack to bypass network access controls, perform unauthorized connections to local resources, gain access to sensitive information and compromise vulnerable system.
The weakness exists due to unknown error. A remote attacker can perform SSRF attack to bypass network access controls, perform unauthorized connections to local resources, gain access to sensitive information and compromise vulnerable system.
Remediation
Update to version 9.7.