CVE-2019-7958

Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability

published August 16, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

⚠️ An inherited permissions flaw is lurking in Creative Cloud Desktop Application versions 4.6.1 and earlier! 🎨 Think of it like a hotel where the cleaning staff can access the VIP lounge because nobody checked the access passes. This vulnerability allows unauthorized users to potentially elevate their privileges and access sensitive areas of the application. If exploited, an attacker could gain access to areas they shouldn't be in, leading to unauthorized changes or data exposure. This could put user privacy at risk and compromise the integrity of projects handled within the application.

Put simply

Think of it like a hotel where the cleaning staff can access the VIP lounge because nobody checked the access passes. This vulnerability allows unauthorized users to potentially elevate their privileges and access sensitive areas of the application. This vulnerability arises from improper handling of inherited permissions within the Creative Cloud Desktop Application, allowing an attacker to escalate their privileges without proper authorization.

What to do

If exploited, an attacker could gain access to areas they shouldn't be in, leading to unauthorized changes or data exposure. This could put user privacy at risk and compromise the integrity of projects handled within the application. Update the Creative Cloud Desktop Application to the latest version to ensure that inherited permissions are correctly managed. Conduct a security review of your permissions settings to prevent unauthorized access. It's best to check for updates regularly! You've got this! Stay vigilant and keep your software up-to-date for a more secure experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04353 · 91.2th percentile
Published
2019-08-16T16:38Z
EPSS history
Timeline
  • 16 AUG 16:38Z
    Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability
    cvelistv5