Lucene search

[email protected]CVE-2021-43019

HistoryNov 23, 2021 - 7:15 p.m.

CVE-2021-43019

2021-11-2319:15:08

CWE-732

[email protected]

web.nvd.nist.gov

adobe creative cloud

cve-2021-43019

privilege escalation

setup.exe

vulnerability

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

46.3%

JSON

Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability on the product installer. User interaction is required before product installation to abuse this vulnerability.

Affected configurations

Vulners

NVD

Node

adobecreative_cloud_desktop_applicationRange≤5.5

VendorProductVersionCPE
adobecreative_cloud_desktop_application*cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	creative_cloud_desktop_application	*	cpe:2.3:a:adobe:creative_cloud_desktop_application::::::::

CNA Affected

[
  {
    "product": "Creative Cloud (desktop component)",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "5.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]