CVE-2018-15979

Description

Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.

From the Tenable Blog

Adobe Patches Incomplete Fix for NTLM Credential Leaking Bug (CVE-2018-15979)

Published: 2018-11-14

Researchers have reported an incomplete fix for CVE-2018-4993, an NTLM credential leaking vulnerability that was supposed to be patched in May 2018. Adobe has now released a complete fix.

References

https://www.tenable.com/blog/adobe-patches-incomplete-fix-for-ntlm-credential-leaking-bug-cve-2018-15979

https://helpx.adobe.com/security/products/acrobat/apsb18-40.html

http://www.securitytracker.com/id/1042099

http://www.securityfocus.com/bid/105907

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3