CVE-2021-44702 Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability

🗓️ 14 Jan 2022 19:05:24Reported by adobeType

Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer NTLMv2 SSO Auth leak vulnerabilit

Reporter	Title	Published	Views	Family All 30
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
Tenable Nessus	Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)	12 Jan 202200:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 relate to information disclosure, which can be exploited by attackers to gain increased privileges.	7 Feb 202200:00	–	bdu_fstec
CNNVD	Adobe Acrobat Reader Dc 信息泄露漏洞	11 Jan 202200:00	–	cnnvd
CNVD	Adobe Acrobat Reader information leakage vulnerability	16 Jan 202200:00	–	cnvd
Check Point Advisories	Adobe Acrobat And Reader Improper Access Control (APSB22-01: CVE-2021-44702)	11 Jan 202200:00	–	checkpoint_advisories
CVE	CVE-2021-44702	14 Jan 202219:05	–	cve
EUVD	EUVD-2021-31518	3 Oct 202520:07	–	euvd

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "21.007.20099",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "20.004.30017",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "17.011.30204",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb22-01.html

14 Jan 2022 19:05Current

5.5Medium risk

Vulners AI Score5.5

CVSS 33.1

EPSS0.02072

CWE-200