Vulnerability record · CVE-2023-22232 · published 17 February 2023
CVE-2023-22232: Adobe Connect improper access control allows security feature bypass
Adobe · Connect
Adobe Connect versions 11.4.5 and earlier, and 12.1.5 and earlier, contain an improper access control flaw (CWE-284) that lets an attacker bypass a security feature. The impact is limited to the integrity of a minor feature, but the flaw is network-reachable and needs no user interaction, so it can be triggered at scale.
Description
Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Automated analysis
medium priorityCVSS is medium (5.3) with only low integrity impact, but the flaw is remotely reachable without authentication or user interaction and has a very high EPSS score.
What it is
Adobe Connect versions 11.4.5 and earlier, and 12.1.5 and earlier, contain an improper access control flaw (CWE-284) that lets an attacker bypass a security feature. The impact is limited to the integrity of a minor feature, but the flaw is network-reachable and needs no user interaction, so it can be triggered at scale.
Impact
An attacker can bypass an access control check and alter the integrity of a minor feature. There is no confidentiality or availability impact per the CVSS vector.
Attack surface
Reachable over the network (AV:N) with no privileges (PR:N) and no user interaction (UI:N). The description does not specify the exact endpoint or request, so the precise entry point is not documented in this record.
Exploitation
Not listed in CISA KEV and no ransomware usage is documented. EPSS is high (0.81875, 99.63rd percentile), and a public Packet Storm reference titled 'Local File Disclosure' exists, but the record does not confirm active exploitation.
What to do
- Upgrade Adobe Connect to a version later than 11.4.5 and 12.1.5 per Adobe advisory APSB23-05.
- If immediate upgrade is not possible, restrict network access to the Connect server to trusted users and networks.
- Review and tighten access control configuration on the Connect deployment, especially for minor features referenced in the advisory.
- Monitor Adobe's advisory page for updated fixed version guidance.
Detection
- Monitor web and application logs for requests that bypass expected authorization checks on Connect endpoints.
- Alert on anomalous access patterns to Connect features from unauthenticated or unexpected sources.
- Track file access or disclosure attempts against the Connect server consistent with the public Packet Storm reference.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
Track CVE-2023-22232 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2023-22232), CISA KEV, FIRST EPSS (scores of 2026-09-24). This page is refreshed as NVD updates the record.
