cve/2023/CVE-2023-22232.md

### [CVE-2023-22232](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22232)
![](https://img.shields.io/static/v1?label=Product&message=Connect&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%3D%2011.4.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Access%20Control%20(CWE-284)&color=brighgreen)

### Description

Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.

### POC

#### Reference
- http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html

#### Github
- https://github.com/ARPSyndicate/cvemon