Lucene search

AdobeCVE-2021-28633

HistoryAug 24, 2021 - 7:15 p.m.

CVE-2021-28633

2021-08-2419:15:13

CWE-379

CWE-668

adobe

web.nvd.nist.gov

adobe

creative cloud

desktop app

installer

vulnerability

file overwriting

nvd

cve-2021-28633

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

6.1

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires physical interaction to the system.

Affected configurations

Nvd

Vulners

Node

adobecreative_cloud_desktop_applicationRange≤2.4

VendorProductVersionCPE
adobecreative_cloud_desktop_application*cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	creative_cloud_desktop_application	*	cpe:2.3:a:adobe:creative_cloud_desktop_application::::::::

CNA Affected

[
  {
    "product": "Creative Cloud (desktop component)",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

helpx.adobe.com/security/products/creative-cloud/apsb21-41.html

Social References

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

6.1

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Related for CVE-2021-28633