CVE-2017-3111

EUVD-2017-12252
An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Sensitive tokens are included in http GET requests under certain circumstances.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
adobeexperience_manager
6.1.0
adobeexperience_manager
6.2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101843
http://www.securitytracker.com/id/1039800
https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html
http://www.securityfocus.com/bid/101843
http://www.securitytracker.com/id/1039800
https://helpx.adobe.com/security/products/experience-manager/apsb17-41.html