PT-2017-15661
CVE-2017-3111
·
Published
2017-12-09
·
Updated
2017-12-14
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Adobe Experience Manager versions 6.0 through 6.3
Description
An issue was discovered where sensitive tokens are included in http GET requests under certain circumstances.
Recommendations
For Adobe Experience Manager versions 6.0 through 6.3, consider restricting access to sensitive tokens to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾