PT-2021-2517 · Adobe · Adobe Creative Cloud Desktop Application

Published 2021-03-09 · Updated 2021-12-03 · CVE-2021-21068

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.3 and earlier

Description The issue is related to the creation of temporary files with insecure permissions in the Adobe Creative Cloud Desktop Application. Exploitation of this issue could allow an attacker to execute arbitrary code or cause arbitrary file overwriting. It requires physical access and user interaction to exploit this issue.

Recommendations For Adobe Creative Cloud Desktop Application versions 5.3 and earlier, update to a version later than 5.3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-379

Related Identifiers

BDU:2021-01917

CVE-2021-21068

Affected Products

Adobe Creative Cloud Desktop Application

References · 7

• https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01917 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21068 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21068 · Security Note
• https://t.me/cibsecurity/24863 · Telegram Post
• https://t.me/cvenotify/11275 · Telegram Post
• https://t.me/cvenotify/11475 · Telegram Post