CVE-2024-20738 is a critical Improper Authentication vulnerability affecting Adobe FrameMaker Publishing Server versions 2022.1 and earlier, as well as Microsoft Windows installations of the software. This flaw allows an unauthenticated attacker to bypass security mechanisms and gain unauthorized access without user interaction. With a CVSS score of 9.8, the vulnerability presents a high risk of complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2022CPE matchmatch criteria | cpe:2.3:a:adobe:framemaker_publishing_server:*:*:*:*:*:*:*:* | ||
2022CPE matchmatch criteria | cpe:2.3:a:adobe:framemaker_publishing_server:2022:-:*:*:*:*:*:* | ||
2022CPE matchmatch criteria | cpe:2.3:a:adobe:framemaker_publishing_server:2022:update1:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.