CVE-2022-30670

Published: Jun 16, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD (Secondary)

Description

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.

Affected (5)

Products: Adobe: Robohelp Server

Adobe

1 product

Robohelp Server

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Robohelp Server	Before 11
Adobe Robohelp Server	Version 11
Adobe Robohelp Server	Version 11 update1
Adobe Robohelp Server	Version 11 update2
Adobe Robohelp Server	Version 11 update3

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://helpx.adobe.com/security/products/robohelp-server/apsb22-31.html

Source: psirt@adobe.com

Vendor Advisory

https://helpx.adobe.com/security/products/robohelp-server/apsb22-31.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.