An AEM java servlet in AEM versions 6.5.5.0 (and below) and 6.4.8.1 (and below) executes with the permissions of a high privileged service user. If exploited, this could lead to read-only access to sensitive data in an AEM repository.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2020-09-10T16:34:41.953574Z

Updated: 2024-09-16T17:33:37.848Z

Reserved: 2020-03-02T00:00:00

Link: CVE-2020-9733

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2020-09-10T17:15:36.423

Modified: 2021-09-14T17:28:36.033

Link: CVE-2020-9733

cve-icon Redhat

No data.