FrameMaker vulnerability

[seanb_us@yahoo.com]

Hi,

One of our IT guys just sent me this information about a FrameMaker vulnerability. Is it a thing?

Adobe Framemaker CVE-2018-15974 Privilege Escalation Vulnerability

Bugtraq ID:	105537
Class:	Design Error
CVE:	CVE-2018-15974
Remote:	Yes
Local:	No
Published:	Oct 09 2018 12:00AM
Updated:	Oct 09 2018 12:00AM
Credit:	Kushal Arvind Shah of Fortinetâ??s Fortiguard Lab

Sean

[Jeff_Coatsworth]

Not that I've ever heard - what's the issue?

[Jeff_Coatsworth · Accepted solution]

Quick google shows that Adobe has already dealt with it - Adobe Security Bulletin

[seanb_us@yahoo.com]

Adobe Framemaker is prone to a privilege-escalation vulnerability.

Attackers can exploit these issues to gain elevated privileges.

[seanb_us@yahoo.com]

That fix for FrameMaker by Adobe is reported for version 1.0.5.1 and below. My FM version is 15 something. Surely they aren't patching FrameMaker versions from 1990?

[Jeff_Coatsworth]

Looks like they've only patched it in FM2019.