← Back

CVE-2018-15979

nvd nist
Published: Nov 29, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.

Affected (6)

Adobe
2 products
Acrobat Dc
Acrobat Reader Dc
Configuration A
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
Acrobat Dc
15.006.30060 ≤ version ≤ 15.006.30456
Acrobat Dc
17.011.30059 ≤ version ≤ 17.011.30105
Acrobat Dc
15.008.20082 ≤ version ≤ 19.008.20080
Adobe
Acrobat Reader Dc
15.006.30060 ≤ version ≤ 15.006.30456
Acrobat Reader Dc
17.011.30059 ≤ version ≤ 17.011.30105
Acrobat Reader Dc
15.008.20082 ≤ version ≤ 19.008.20080
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

Source: psirt@adobe.com
Third Party AdvisoryVDB Entry
Source: psirt@adobe.com
Third Party AdvisoryVDB Entry
Source: psirt@adobe.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.