CVE-2021-44702

🗓️ 14 Jan 2022 19:05:24Reported by adobeType

Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials

Reporter	Title	Published	Views	Family All 28
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
CNNVD	Adobe Acrobat Reader Dc 信息泄露漏洞	11 Jan 202200:00	–	cnnvd
CNVD	Adobe Acrobat Reader information leakage vulnerability	16 Jan 202200:00	–	cnvd
Check Point Advisories	Adobe Acrobat And Reader Improper Access Control (APSB22-01: CVE-2021-44702)	11 Jan 202200:00	–	checkpoint_advisories
Cvelist	CVE-2021-44702 Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability	14 Jan 202219:05	–	cvelist
EUVD	EUVD-2021-31518	3 Oct 202520:07	–	euvd
Hive Pro Threat Advisories	Security Updates in Multiple Products of Adobe	12 Jan 202210:29	–	hivepro

NVD

Vulners

Node

adobe acrobat_dcRange21.001.20149–21.007.20099continuous

adobe acrobat_reader_dcRange21.001.20149–21.007.20099continuous

AND

microsoft windowsMatch-

Node

adobe acrobat_dcRange21.001.20149–21.007.20099continuous

adobe acrobat_reader_dcRange21.001.20149–21.007.20099continuous

AND

apple macosMatch-

Node

adobe acrobatRange20.001.30005–20.004.30017classic

adobe acrobat_readerRange20.001.30005–20.004.30017classic

AND

apple macosMatch-

microsoft windowsMatch-

Node

adobe acrobatRange17.011.30180–17.011.30204classic

adobe acrobat_readerRange17.011.30180–17.011.30204classic

AND

apple macosMatch-

microsoft windowsMatch-

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "21.007.20099",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "20.004.30017",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "17.011.30204",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb22-01.html

21 Nov 2024 06:31Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.3

CVSS 24.3

CVSS 33.1

EPSS0.01723

CWE-200