CVE-2021-28568CWE-379

Adobe Genuine Services insecure file permission could lead to privilege escalation

Medium · published September 8, 2021

CVSS v3.1
5.8
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00578 · 46.9th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2021-09-08T16:20Z
EPSS history
Timeline
  • 08 SEP 16:20Z
    Adobe Genuine Services insecure file permission could lead to privilege escalation
    cvelistv5