Description (CNA)
An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Adobe / Experience Manager | affected unspecified through 6.5.5.0; affected unspecified through 6.4.8.1; affected unspecified through None |
CWE
CWE-200
References
ADP enrichment
No English description supplied.