CVE-2018-15979

Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
adobeacrobat_dc
15.006.30060 ≤
𝑥
≤ 15.006.30456
adobeacrobat_dc
15.008.20082 ≤
𝑥
≤ 19.008.20080
adobeacrobat_dc
17.011.30059 ≤
𝑥
≤ 17.011.30105
adobeacrobat_reader_dc
15.006.30060 ≤
𝑥
≤ 15.006.30456
adobeacrobat_reader_dc
15.008.20082 ≤
𝑥
≤ 19.008.20080
adobeacrobat_reader_dc
17.011.30059 ≤
𝑥
≤ 17.011.30105
𝑥
= Vulnerable software versions