Vulnerabilities > CVE-2021-43017 - Creation of Temporary File in Directory with Incorrect Permissions vulnerability in Adobe Creative Cloud Desktop Application

047910
CVSS 4.2 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
adobe
CWE-379
NVD
Published: 2021-11-18
Updated: 2022-02-02

Summary

Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the victim's local machine. User interaction is required before product installation to abuse this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Adobe
8
OS
Apple
1

Common Weakness Enumeration (CWE)

References