CVE-2021-28633

MEDIUM

6.1

Descricao

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires physical interaction to the system.

Detalhes CVE

Pontuacao CVSS v3.16.1

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Vetor de ataquePHYSICAL

ComplexidadeLOW

Privilegios necessariosHIGH

Interacao do usuarioREQUIRED

Publicado8/24/2021

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

adobe:creative_cloud_desktop_application

Fraquezas (CWE)

CWE-379CWE-668

Referencias

https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html(psirt@adobe.com)

https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.