CVE-2021-28568: falha de média gravidade em Adobe GoCart
Adobe Genuine Services insecure file permission could lead to privilege escalation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.8epss 0.6%
Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Produtos afetados
Adobe · GoCartCVEs relacionadas — Adobe GoCart
No mesmo produto, das mais perigosas para as menos.
CVE-2021-40708HIGHAdobe Genuine Service Installer Privilege Escalation VulnerabilityEPSS 1.7%CVE-2020-9668HIGHAGSService program mishandling symbolic linksEPSS 1.6%CVE-2021-43017MEDIUMAdobe Creative Cloud DLL Hijacking Local Application Denial of ServiceEPSS 1.2%CVE-2020-9681MEDIUMAdobe Genuine Service privilege escalation vulnerabilityEPSS 0.7%CVE-2020-9667MEDIUMUncontrolled Search Path Element in AGSService.exeEPSS 0.5%