← CVE Intelligence

CVE-2024-34129

Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths PUBLISHED

Description (CNA)

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to access files and directories that are outside the restricted directory and also to overwrite arbitrary files. Exploitation of this issue does not requires user interaction and attack complexity is high.

Affected (CNA)

Vendor / productVersions
Adobe / Acrobat Mobile Sign Androidaffected 0 through 24.4.2.33155

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.