CVE-2021-40745 — Adobe Campaign Path Traversal Leads to Information Exposure

CVE-2021-40745

Adobe Campaign Path Traversal Leads to Information Exposure PUBLISHED

Description (CNA)

Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated attacker can enumerate other files on the server.

Affected (CNA)

Vendor / product	Versions
Adobe / Campaign	affected unspecified through 21.2.1; affected unspecified through None

CWE

CWE-22

References

https://helpx.adobe.com/security/products/campaign/apsb21-52.html

ADP enrichment

CVE

No English description supplied.

https://helpx.adobe.com/security/products/campaign/apsb21-52.html

CISA-ADP

No English description supplied.

No references supplied.