VulnerabilityModified

CVE-2020-9681

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability.

MEDIUM 6.5EPSS 0.68%

Does this matter?

Lower severity and a low EPSS score (0.68%). Track it; it rarely justifies an emergency change on its own.

Description

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of this issue requires user interaction.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS: 0.68% probability · 51th percentile
CISA KEV: Not listed
Weakness: CWE-427
Affected: adobe/genuine service
Source: psirt@adobe.com

References

https://helpx.adobe.com/security/products/integrity_service/apsb20-42.htmlVendor Advisory
https://helpx.adobe.com/security/products/integrity_service/apsb20-42.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.