CVE-2024-34129 HIGH

CVE-2024-34129: Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths

Vendor Adobe
Product Acrobat Mobile Sign Android
Weakness CWE-22 · Path traversal
Published June 13, 2024
Last update August 7, 2024

CVSS base score

7.5/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to access files and directories that are outside the restricted directory and also to overwrite arbitrary files. Exploitation of this issue does not requires user interaction and attack complexity is high.

Key dates

02Disclosure timeline

June 13, 2024 CVE published
August 7, 2024 Record updated

Related vulnerabilities

04Related CVE