VYPR
Unrated severityNVD Advisory· Published Sep 10, 2020· Updated Sep 16, 2024

Sensitive information disclosure possible in AEM

CVE-2020-9733

Description

An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.