CVE-2018-15979
HIGHAdobe Acrobat and Reader DC < 15.006.30456, 15.008.20082-19.008.20080 - NTLM SSO Hash Theft
Title source: llmDescription
Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb18-40.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105907
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1042099
Scores
CVSS v3
7.5
EPSS
0.1027
EPSS Percentile
95.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (4)
adobe/acrobat_dc
15.006.30060 - 15.006.30456
adobe/acrobat_dc
15.008.20082 - 19.008.20080
adobe/acrobat_reader_dc
15.006.30060 - 15.006.30456
adobe/acrobat_reader_dc
15.008.20082 - 19.008.20080
Published
Nov 29, 2018
Tracked Since
Feb 18, 2026