Product:
Adobe Experience Manager
Summary
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-54246 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can send specially crafted requests to the affected Adobe Experience Manager instance. By bypassing the security measures in place, the attacker can gain unauthorized write access to sensitive areas of the application, potentially leading to further exploitation or data compromise.
Affected Products
- Adobe Experience Manager 6.5.23.0 and earlier: Vulnerable to Incorrect Authorization leading to potential unauthorized write access.
Mitigation
To mitigate this vulnerability, it is recommended that users upgrade to the latest version of Adobe Experience Manager. Additionally, implementing strict access controls and monitoring for unusual activity can help reduce the risk of exploitation.