VulnerabilityModified

CVE-2021-21096

Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service.

MEDIUM 5.5EPSS 0.71%

Does this matter?

Lower severity and a low EPSS score (0.71%). Track it; it rarely justifies an emergency change on its own.

Description

Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user. Exploitation of this issue does not require user interaction.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.71% probability · 51th percentile
CISA KEV: Not listed
Weakness: CWE-285
Affected: adobe/bridge
Source: psirt@adobe.com

References

https://helpx.adobe.com/security/products/bridge/apsb21-23.htmlVendor Advisory
https://helpx.adobe.com/security/products/bridge/apsb21-23.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.