Adobe Updates
2881Warning Date
Severity Level
Warning Number
Target Sector
29 April, 2020
● Critical
2020-1188
All
Description:
Adobe has released security updates to address several vulnerabilities in the following products:
- Adobe Bridge
- 10.0.1 and earlier version
- Illustrator 2020
- 24.0.2 and earlier versions
- Magento Commerce
- 2.3.4 and earlier versions
- Magento Open Source
- 2.3.4 and earlier versions
- Magento Commerce
- 2.2.11 and earlier versions
- Magento Open Source
- 2.2.11 and earlier versions
- Magento Enterprise Edition
- 1.14.4.4 and earlier versions
- Magento Community Edition
- 1.9.4.4 and earlier versions
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code
- Unauthorized disclosure of information
- Command injection
- Cross-site scripting (XSS)
- Bypass of a protection mechanism
Best practice and Recommendations:
The CERT team encourages users to review Adobe security advisory and apply the necessary updates: