Detections
Analytics
CVE-2018-15979
high
Description
Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.
From the Tenable Blog
Adobe Patches Incomplete Fix for NTLM Credential Leaking Bug (CVE-2018-15979)
Published: 2018-11-14
Researchers have reported an incomplete fix for CVE-2018-4993, an NTLM credential leaking vulnerability that was supposed to be patched in May 2018. Adobe has now released a complete fix.
References
https://helpx.adobe.com/security/products/acrobat/apsb18-40.html