CVE-2021-21078 Vulnerability Details

  /     /     /  

CVE-2021-21078 Metadata Quick Info

CVE Published: 12/03/2021 | CVE Updated: 17/09/2024 | CVE Year: 2021
Source: adobe | Vendor: Adobe | Product: Creative Cloud (desktop component)
Status : PUBLISHED

---

CVE-2021-21078 Description

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-426
CWE Name: Untrusted Search Path (CWE-426)
Source: Adobe

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).