CVE-2021-28597 Vulnerability Details

  /     /     /  

CVE-2021-28597 Metadata Quick Info

CVE Published: 28/06/2021 | CVE Updated: 17/09/2024 | CVE Year: 2021
Source: adobe | Vendor: Adobe | Product: Photoshop Elements
Status : PUBLISHED

---

CVE-2021-28597 Description

Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-379
CWE Name: Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
Source: Adobe

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).