RCE Bug in Adobe Experience Manager Revealed

2 years ago 54

BOOK THIS SPACE FOR AD

ARTICLE AD

1. July 2021

This article has been indexed from Softpedia News / Security

Adobe’s content management system includes a flaw that affects Mastercard, LinkedIn and Sony’s PlayStation customers, according to Threat Post.

The vulnerability, that was patched in May, allowed hackers to gain access to passwords and remotely execute code on vulnerable AEM installations. It was discovered that Adobe’s content management system, Adobe Experience Manager (AEM), contained a zero-day vulnerability that may have affected customers as diverse as MasterCard, LinkedIn, and PlayStation.

The bug was identified by ethical hackers with the help of Detectify Crowdsource and it seems to affect the CRX Package Manager component of Adobe’s AEM. More precisely, Ai Ho and Bao Bui are the original discoverers of the vulnerability in December 2020, while wor…