Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked "OBSOLETE" but the account is also active, within the authentication system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Adobe LiveCycle "OBSOLETE"用户信息泄露漏洞
Vulnerability Description
Adobe LiveCycle软件简化不同系统、业务规则和部门之间的业务流程并实现业务流程的自动化。 Adobe LiveCycle访问控制的实现上存在漏洞，远程攻击可能获取非授权的访问。 如果用户在认证系统(LDAP、活动目录、eDirectory)中是活动的话，则即使在LiveCycle User Manager表中已经过期，该用户仍可以成功的认证到LiveCycle Workflow或LiveCycle Form Manager。在一些情况下在LDAP中为活动但在LiveCycle中已过期的用户可以
CVSS Information
N/A
Vulnerability Type
N/A