Product:
Adobe Pass
Summary
Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install a malicious SDK.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-61830 |
Exploitation
To exploit this vulnerability, an attacker must convince a victim to install a malicious SDK. Once the SDK is installed, the attacker can bypass security measures and gain unauthorized access to sensitive data and functionalities within Adobe Pass.
Affected Products
- Adobe Pass versions 3.7.3 and earlier: These versions are vulnerable to an Incorrect Authorization issue that allows unauthorized access.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Adobe Pass that addresses the Incorrect Authorization issue. Additionally, users should avoid installing SDKs from untrusted sources to prevent exploitation.