« Volver al listado

CVE-2024-30300

Estado: ModificadaCrítica (9.8)—

Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive information which may include system or user privileges. Exploitation of this issue does not require user interaction.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adobe — Framemaker Publishing Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-30300",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-30300",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-13T00:00:00+00:00"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@adobe.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Adobe Framemaker Publishing Server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "2022.2"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:adobe:framemaker_publishing_server:*:*:*:*:*:*:*:*"
          ],
          "vendor": "adobe",
          "product": "framemaker_publishing_server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "2022.2"
            },
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "2020update3"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2024-06-13T12:15:10.170",
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-38.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-38.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@adobe.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive information which may include system or user privileges. Exploitation of this issue does not require user interaction."
    },
    {
      "lang": "es",
      "value": "Las versiones 2020.3, 2022.2 y anteriores de Adobe Framemaker Publishing Server se ven afectadas por una vulnerabilidad de exposición de información (CWE-200) que podría provocar una escalada de privilegios. Un atacante podría aprovechar esta vulnerabilidad para obtener acceso a información confidencial que puede incluir privilegios del sistema o del usuario. La explotación de este problema no requiere la interacción del usuario."
    }
  ],
  "lastModified": "2026-06-17T07:26:41.983",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "894129BD-FE1C-400B-9641-28A2361C4B2C",
              "versionEndExcluding": "2020"
            },
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:2020:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "990A77FE-6ABC-4B4B-95DB-81C5A0A937DF"
            },
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:2020:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD62A5D7-A24C-40D3-99F9-DBDA1F2C1F77"
            },
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:2020:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B939AC7E-2E73-47AD-8262-01CD39DD9AB8"
            },
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:2020:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6F7A2DC-F57E-4AFC-8336-F7C68BEFB3A7"
            },
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:2022:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F6C1F2F-5C06-4DF9-8DED-3EBE8816FD44"
            },
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:2022:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C6393D1-C934-4FBC-89B1-A84F175FB091"
            },
            {
              "criteria": "cpe:2.3:a:adobe:framemaker_publishing_server:2022:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EAFA857-3BA5-49ED-B566-16ABF3CA210C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@adobe.com"
}