CVE-2021-28579— Adobe Connect improper access control could lead to privilege escalation
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-28579
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Connect improper access control could lead to privilege escalation
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participants.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
访问控制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Connect 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Connect是美国奥多比（Adobe）公司的一个用于创建会议环境的软件。 Adobe Connect存在安全漏洞，该漏洞允许远程攻击者可利用该漏洞获得未经授权的访问，否则受到限制的功能。Adobe Connect: 11.0、11.0.5、11.0.6、11.0.7、11.2、11.2.1。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-28579
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-28579
请登录查看更多情报信息。
- https://helpx.adobe.com/security/products/connect/apsb21-36.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-28579
Same Patch Batch · Adobe · 2021-06-28 · 24 CVEs total
| CVE-2021-21101 | 8.8 HIGH | Adobe Illustrator TTF font parsing out-of-bounds write vulnerability could lead to remote |
| CVE-2021-28588 | 8.8 HIGH | Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability |
| CVE-2021-28562 | 8.8 HIGH | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution |
| CVE-2021-21102 | 8.8 HIGH | Adobe Illustrator DOCX file parsing directory traversal vulnerability could lead to remote |
| CVE-2021-21090 | 8.8 HIGH | Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code |
| CVE-2021-21099 | 8.8 HIGH | Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote cod |
| CVE-2021-21098 | 8.8 HIGH | Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote cod |
| CVE-2021-28570 | 8.3 HIGH | Adobe After Effects uncontrolled search path element vulnerability could lead to remote co |
| CVE-2021-28583 | 7.5 HIGH | Magento Commerce insecure storage of sensitive documentation |
| CVE-2021-21083 | 7.5 HIGH | Adobe Experience Manager broken access control in DSRPReindexServlet could lead to denial- |
| CVE-2021-21084 | 7.3 HIGH | Adobe Experience Manager stored cross-site scripting vulnerability in resource resolver fa |
| CVE-2021-28556 | 6.9 MEDIUM | Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript e |
| CVE-2021-28563 | 6.5 MEDIUM | Magento Commerce improper Authorization via the 'Create Customer' endpoint |
| CVE-2021-28584 | 5.4 MEDIUM | Magento Commerce path traversal vulnerability in child theme store creation |
| CVE-2021-28585 | 5.3 MEDIUM | Magento Commerce improper input validation in customer customer webapi |
| CVE-2021-28575 | 4.3 MEDIUM | Adobe Animate out-of-bounds read vulnerability could lead to information exposure |
| CVE-2021-28574 | 4.3 MEDIUM | Adobe Animate out-of-bounds read vulnerability could lead to information exposure |
| CVE-2021-28576 | 4.3 MEDIUM | Adobe Animate out-of-bounds read vulnerability could lead to information exposure |
| CVE-2021-28573 | 4.3 MEDIUM | Adobe Animate out-of-bounds read vulnerability could lead to information exposure |
| CVE-2021-28586 | Adobe After Effects PDF file parsing out-of-bounds write could lead to remote code executi |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Connect
- CVE-2025-15331
Tanium addressed an uncontrolled resource consumption vulner - CVE-2024-31849
CData Connect 安全漏洞 - CVE-2023-22232
Adobe Connect Improper Access Control Security feature bypas - CVE-2021-40719
Adobe Connect Deserialization of Untrusted Data Remote Code - CVE-2021-40721
Adobe Connect Reflected Cross Site Scripting
Same vendor: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
Same weakness: CWE-284
- CVE-2026-8233
Dotouch XproUPF access control - CVE-2026-42569
phpvms: /importer authorization bypass causing full database - CVE-2026-42205
Avo: Broken Access Control: Unauthorized Execution of Arbitr - CVE-2026-41487
Langfuse: Improper role-based-access control in Langfuse LLM - CVE-2026-42278
UltraDAG: Smart Account Spending Policy Bypass via Pockets
V. Comments for CVE-2021-28579
No comments yet