CVE-2023-2679— Data leakage in Adobe connector for SPE edition of SLM
Quick assessment
Affected
Snow Software SPE SLM
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Snow Software Software Asset Management Platform Enterprise（SPE）是Snow Software公司的一款软件资产管理平台。它是一种集成的解决方案，旨在帮助企业有效管理和优化其软件资产。 Snow Software Software Asset Management Platform Enterprise 9.27.0版本存在安全漏洞，该漏洞源于Adobe连接器中数据泄漏。攻击者利用该漏洞可以观察其他用户数据。
Possible ATT&CK Techniques 1 AI
T1530 · Data from Cloud Storage
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-2679
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Data leakage in Adobe connector for SPE edition of SLM
Source: CVE Program / CVE List V5
Vulnerability Description
Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Snow Software Software Asset Management Platform Enterprise 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Snow Software Software Asset Management Platform Enterprise（SPE）是Snow Software公司的一款软件资产管理平台。它是一种集成的解决方案，旨在帮助企业有效管理和优化其软件资产。 Snow Software Software Asset Management Platform Enterprise 9.27.0版本存在安全漏洞，该漏洞源于Adobe连接器中数据泄漏。攻击者利用该漏洞可以观察其他用户数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Snow Software | SPE SLM | 9.27.0 ~ 9.30.0 | - |
|
II. Public POCs for CVE-2023-2679
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-2679
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Snow Software
-
CVE-2024-1150
Improper validation of update packages -
CVE-2024-1149
Improper validation of update packages -
CVE-2023-7169
Impersonate vendor signed Powershell scripts -
CVE-2023-3937
Cross site scripting vulnerabilities in Snow License Manager -
CVE-2023-3864
SQL injection vulnerability in Snow License Manager
Same weakness: CWE-269
-
CVE-2026-104748
SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation -
CVE-2026-104767
Membership & User Roles for WooCommerce (Automatic Role Chan -
CVE-2026-104749
Bit integrations <= 2.10.6 - Unauthenticated Privilege Escal -
CVE-2026-85990
Leantime: Any Authenticated User Can Self-Escalate to Admin -
CVE-2026-109143
calcom cal.com/cal.diy Credentials delete credentials.delete
V. Comments for CVE-2023-2679
No comments yet