Vulnerabilities > CVE-2021-40708 - Creation of Temporary File in Directory with Incorrect Permissions vulnerability in Adobe Genuine Service 7.1/7.3

047910
CVSS 6.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

Adobe Genuine Service versions 7.3 (and earlier) are affected by a privilege escalation vulnerability in the AGSService installer. An authenticated attacker could leverage this vulnerability to achieve read / write privileges to execute arbitrary code. User interaction is required to abuse this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Adobe
2
OS
Apple
1
OS
Microsoft
1