Privilege escalation via fake worker token theft

Information exposure in Adobe FrameMaker Publishing Server 2020 Update 3 and earlier and 2022.2 and earlier allows remote attackers to steal JWTs. The server accepts an unauthenticated worker registration and gives the fake worker legitimate publishing tasks containing the submitting user's JWT. Possession of that token enables the attacker's use of the user's authenticated operations, including administrator creation when the token belongs to an administrator.