CVE-2021-21068CWE-379

Adobe Creative Cloud installer arbitrary file overwrite vulnerability

Medium · published March 12, 2021

CVSS v3.0
6.1
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00619 · 49.0th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2021-03-12T18:12Z
EPSS history
Timeline
  • 12 MAR 18:12Z
    Adobe Creative Cloud installer arbitrary file overwrite vulnerability
    cvelistv5