Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install a malicious SDK.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 11 Nov 2025 18:45:00 +0000

Type Values Removed Values Added
Description Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install a malicious SDK.
Title Adobe Pass | Incorrect Authorization (CWE-863)
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2025-11-11T18:30:22.648Z

Reserved: 2025-10-01T17:52:06.980Z

Link: CVE-2025-61830

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-11-11T19:15:35.130

Modified: 2025-11-11T19:15:35.130

Link: CVE-2025-61830

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.