Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-44702
HistoryJan 14, 2022 - 8:15 p.m.

CVE-2021-44702

2022-01-1420:15:12
CWE-200
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

0.007 Low

EPSS

Percentile

80.3%

JSON

Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.

Affected configurations

NVD
Node
adobeacrobat_dcRange21.001.20149–21.007.20099continuous
OR
adobeacrobat_reader_dcRange21.001.20149–21.007.20099continuous
AND
microsoftwindowsMatch-
Node
adobeacrobat_dcRange21.001.20149–21.007.20099continuous
OR
adobeacrobat_reader_dcRange21.001.20149–21.007.20099continuous
AND
applemacosMatch-
Node
adobeacrobatRange20.001.30005–20.004.30017classic
OR
adobeacrobat_readerRange20.001.30005–20.004.30017classic
AND
applemacosMatch-
OR
microsoftwindowsMatch-
Node
adobeacrobatRange17.011.30180–17.011.30204classic
OR
adobeacrobat_readerRange17.011.30180–17.011.30204classic
AND
applemacosMatch-
OR
microsoftwindowsMatch-

Related

cnvd 1
checkpoint_advisories 1
prion 1
cve 1
cvelist 1
hivepro 1
nessus 4
openvas 12
adobe 1
kaspersky 1
cnvd
cnvd
Adobe Acrobat Reader information leakage vulnerability
2022-01-16 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat And Reader Improper Access Control (APSB22-01: CVE-2021-44702)
2022-01-11 00:00:00
prion
prion
Information disclosure
2022-01-14 20:15:00
cve
cve
CVE-2021-44702
2022-01-14 20:15:12
cvelist
cvelist
CVE-2021-44702 Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability
2022-01-11 00:00:00
hivepro
hivepro
Security Updates in Multiple Products of Adobe
2022-01-12 10:29:55
nessus
nessus
Adobe Reader < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)
2022-01-12 00:00:00
Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01)
2022-01-12 00:00:00
Adobe Acrobat < 17.011.30207 / 20.004.30020 / 21.011.20039 Multiple Vulnerabilities (APSB22-01) (macOS)
2022-01-12 00:00:00
openvas
openvas
Adobe Acrobat 2017 Security Update (APSB22-01) - Windows
2022-01-13 00:00:00
Adobe Reader DC Continuous Security Update (APSB22-01) - Windows
2022-01-13 00:00:00
Adobe Reader 2017 Security Update (APSB22-01) - Mac OS X
2022-01-13 00:00:00
adobe
adobe
APSB22-01 : Security update available for Adobe Acrobat and Reader
2022-01-11 00:00:00
kaspersky
kaspersky
KLA12418 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
2022-01-11 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

0.007 Low

EPSS

Percentile

80.3%

JSON
Related for NVD:CVE-2021-44702
cnvd1checkpoint_advisories1prion1cve1cvelist1hivepro1nessus4openvas12adobe1kaspersky1