VULNERABILITY INTELLIGENCE

CVE-2021-28579

CVSS score4.3 MEDIUM
EPSS probability1.09%
CISA KEVNot currently listed
Published2021-06-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participants.

Weakness classification

  • psirt@adobe.com: CWE-284
  • nvd@nist.gov: NVD-CWE-Other

Primary references