CVE-2021-28597

Summary

Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.

Affected Software

Weaknesses

• CWE-379: Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

ADP Enrichment

CVE Program Container

Additional References

• https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html

• ←Previous
• Next→