Adobe Connect 10 - Username Disclosure

Author: h4shur
type: webapps
platform: multiple
port: 
date_added: 2021-02-09 
date_updated: 2023-04-06 
verified: 0 
codes: CVE-2023-22232 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Title: Adobe Connect 10 - Username Disclosure
# Author: h4shur
# date:2021-02-07
# Vendor Homepage: https://www.adobe.com
# Software Link: https://www.adobe.com/products/adobeconnect.html
# Version:  10 and earlier
# Tested on: Windows 10 & Google Chrome
# Category : Web Application Bugs

### Description :

By adding this (/system/help/support) to the end of the desired website address, you can view the username without any filter or obstacle. Sometimes even without a username and password. And by adding (/system/login) to the end of the desired website address, you can access the admin panel without any filters.

### POC :
site.com/system/help/support

### Admin Panel :
site.com/system/login