Description
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Affected products
- Adobe / c2pa0.89.2
- Adobe / c2patool0.26.70
- Adobe / Content Credentials Command-Line Tool0 – c2patool-v0.26.70
- Adobe / Content Credentials Command-Line Toolc2patool-v0.27.17 – c2patool-v0.27.17
- Adobe / Content Credentials Rust SDK0 – c2pa-v0.89.2
- Adobe / Content Credentials Rust SDKc2pa-v0.90.17 – c2pa-v0.90.17
References
Updated 24m ago · 8 sources