Vulnerabilities > CVE-2021-43017 - Creation of Temporary File in Directory with Incorrect Permissions vulnerability in Adobe Creative Cloud Desktop Application

047910
CVSS 3.5 - LOW
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
adobe
CWE-379
NVD
Published: 2021-11-18
Updated: 2022-02-02

Summary

Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the victim's local machine. User interaction is required before product installation to abuse this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Adobe
7
OS
Apple
1

Common Weakness Enumeration (CWE)

References