CVE-2014-8437
Adobe Flash Player < 13.0.0.252 and 14.x-15.x < 15.0.0.223 - Session Token Exposure
Title source: llmDescription
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow remote attackers to discover session tokens via unspecified vectors.
References (4)
Core 4
Core References
Patch, Vendor Advisory x_refsource_confirm
http://helpx.adobe.com/security/products/flash-player/apsb14-24.html
VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98628
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/71036
Mailing List, Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
Scores
EPSS
0.0400
EPSS Percentile
89.3%
Details
CWE
CWE-200
Status
published
Products (4)
adobe/air
< 15.0.0.356
adobe/air_sdk
< 15.0.0.356
adobe/air_sdk_\&_compiler
< 15.0.0.356
adobe/flash_player
13.0 - 13.0.0.252
Published
Nov 11, 2014
Tracked Since
Feb 18, 2026