Browser back and refresh button attack vulnerability for Author instance. | Community
Skip to main content
manishaa5646486
Level 2
Sep 2, 2022 11:43 AM UTC
Solved

Browser back and refresh button attack vulnerability for Author instance.

Browser back and refresh button attack vulnerability for Author instance. I have Set Cache-control headers, but issue is partial solved for siteadmin but for welcome screen its exists

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    joerghoh
    joerghohAccepted solution
    Employee
    Sep 4, 2022 7:50 AM UTC

    Please raise a ticket with Adobe support and  include a detailled description how to reproduce.

    Posting potential security issues here in the forums is not the best way to get them fixed.

     

    Thanks for your help,

    Jörg

    View reply

    5 replies

    manishaa5646486Author
    Level 2
    Sep 9, 2022 10:01 AM UTC

    thanks for the reply. I have raised some but they have mentioned as this is not considered a vulnerability within our threat model. So, I'm looking for suggestions.

    Translate
      joerghoh
      joerghoh
      Employee
      Sep 9, 2022 12:42 PM UTC

      so if I understand you right, the Adobe security mentioned that this is not covered by their thread-model, but your own security team (or of the customer you are working with) says it is part of their threat-model?

       

      I don't think that you can solve this difference in understanding. Rather let the security teams talk to each other and resolve it themselves. 

      Translate
        manishaa5646486Author
        Level 2
        Sep 13, 2022 10:33 AM UTC

        thanks

        Translate
          arunpatidar
          arunpatidar
          New Participant
          Sep 5, 2022 8:45 AM UTC

          Please raise it with Adobe.

           

          Just a side note:

          As AEM Author access is primarily restricted within intranets, it is not exposed to end users, so this won't have a major impact. 

          Translate
          Arun Patidar
            joerghoh
            joerghohAccepted solution
            Employee
            Sep 4, 2022 7:50 AM UTC

            Please raise a ticket with Adobe support and  include a detailled description how to reproduce.

            Posting potential security issues here in the forums is not the best way to get them fixed.

             

            Thanks for your help,

            Jörg

            Translate
              Terms & ConditionsAccessibility statement

              Loading footer...