PT-2021-6381 · Adobe · Adobe Creative Cloud Desktop Application

Published 2021-09-14 · Updated 2022-02-04 · CVE-2021-28613

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.4 and earlier

Description The issue is related to the creation of temporary files with insecure permissions in the Adobe Creative Cloud Desktop Application. Exploitation of this issue could allow an attacker to gain root privileges and overwrite arbitrary files. It requires local access, administrator privileges, and user interaction.

Recommendations For Adobe Creative Cloud Desktop Application versions 5.4 and earlier, update to a version later than 5.4 to resolve the file handling vulnerability. As a temporary workaround, consider restricting access to temporary files created by the application to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-379

Related Identifiers

BDU:2022-01408

CVE-2021-28613

Affected Products

Adobe Creative Cloud Desktop Application

References · 5

• https://helpx.adobe.com/security/products/creative-cloud/apsb21-76.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28613 · Security Note
• https://bdu.fstec.ru/vul/2022-01408 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28613 · Vendor Advisory
• https://t.me/cvenotify/26274 · Telegram Post