Impact
Adversaries can exploit an uncontrolled resource consumption flaw that allows them to exhaust system resources, causing the Adobe Content Credentials tool or SDK to become unresponsive. This flaw falls under CWE‑400 and can result in a denial‑of‑service condition for the entire application.
Affected Systems
The vulnerability affects the Adobe Content Credentials Command‑Line Tool and the Adobe Content Credentials Rust SDK. No specific affected versions are listed, so all current installations are potentially at risk until a patch is applied.
Risk and Exploitability
The CVSS score of 7.5 reflects a high impact, but the EPSS score is unavailable, and the flaw is not listed in CISA KEV, indicating it may not yet be widely exploited. The description states that exploitation does not require user interaction, suggesting that any entity that can invoke the affected tool or SDK—whether locally or via an API—could trigger the denial of service. Without an explicit remediation from Adobe, the risk remains significant for environments that rely on these components.
OpenCVE Enrichment