Main Vulnerability Database Vulnerabilities #VU269

Information disclosure in Backup functionality in Adobe Experience Manager - CVE-2016-4253

Published: August 9, 2016

Vulnerability identifier: #VU269

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2016-4253

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Adobe

Affected software:
Adobe Experience Manager

Detailed vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to unknown error in Backup functionality. A remote attacker can get access to potentially sensitive data.

Successful exploitation of this vulnerability will allow an attacker to gain unauthorized access to potentially sensitive information.

The vendor has issued fixes to address this vulnerability: