CVE-2020-24425: Privilege escalation vulnerability in Dreamweaver version 20.2
Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-24425?
CVE-2020-24425 is a vulnerability affecting Dreamweaver version 20.2 and earlier, which allows an attacker to escalate privileges.
What is the severity of CVE-2020-24425?
The severity of CVE-2020-24425 is high, with a CVSS score of 7.8.
How does CVE-2020-24425 affect Dreamweaver?
CVE-2020-24425 allows a local user to execute system commands with administrator privileges by exploiting an uncontrolled search path element vulnerability in Dreamweaver.
Is Apple macOS affected by CVE-2020-24425?
No, Apple macOS is not affected by CVE-2020-24425.
Is Microsoft Windows affected by CVE-2020-24425?
No, Microsoft Windows is not affected by CVE-2020-24425.
How can I fix CVE-2020-24425?
To fix CVE-2020-24425, Adobe recommends updating Dreamweaver to version 20.3 or later.