title: Data leakage in Adobe connector for SPE edition of SLM
description: Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.
problem types: CWE-269 Improper Privilege Management
affected:
{
defaultStatus: unaffected
modules: Adobe Connector
platforms: Windows
product: SPE SLM
vendor: Snow Software
versions:
lessThan: 9.30.0, status: affected, version: 9.27.0, versionType: 0
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Hotfix is ready for 9.27.0, 9.27.1, 9.28.0 and 9.29.0. Will be included from 9.30.0