CVE-2024-34130: 
Adobe Acrobat Reader Classic vulnerability analysis and mitigation

CVE-2024-34130 is an Incorrect Authorization vulnerability affecting Adobe Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier. The vulnerability was disclosed on June 13, 2024, and could result in a security feature bypass (NVD).

The vulnerability is classified as CWE-863 (Incorrect Authorization) with a CVSS v3.1 base score of 5.5 (MEDIUM). The attack vector is local (AV:L), with low attack complexity (AC:L), requiring low privileges (PR:L), and no user interaction (UI:N). The scope is unchanged (S:U), with high confidentiality impact (C:H) but no impact on integrity (I:N) or availability (A:N) (NVD).

If exploited, this vulnerability could allow an attacker to access confidential information. The exploitation does not require user interaction, making it particularly concerning for affected systems (NVD).

The vulnerability requires local access and low privileges to exploit. No user interaction is necessary for exploitation, though the attacker must have local access to the affected device (NVD).

Adobe has released version 24.5.0.33694 to address this vulnerability. Users of affected versions should upgrade to the latest version to mitigate the risk (NVD).