CVE-2021-28568
08.09.2021, 17:15
Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| adobe | genuine_service | 𝑥 ≤ 7.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-379 - Creation of Temporary File in Directory with Insecure PermissionsThe software creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.
- CWE-668 - Exposure of Resource to Wrong SphereThe product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.