CVE-2021-21096: Adobe Bridge Genuine Software Service Incorrect Permission Assignment could lead to Denial-of-Service
Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21096?
CVE-2021-21096 has a low severity rating as it allows for denial-of-service conditions due to improper authorization.
How do I fix CVE-2021-21096?
To address CVE-2021-21096, upgrade to Adobe Bridge version 11.0.2 or later, which contains the necessary patches.
Which versions of Adobe Bridge are affected by CVE-2021-21096?
Adobe Bridge versions 10.1.1 and earlier, as well as 11.0.1 and earlier, are affected by CVE-2021-21096.
Can CVE-2021-21096 be exploited remotely?
CVE-2021-21096 could potentially be exploited by a low-privileged attacker within the application context.
What is the nature of the vulnerability in CVE-2021-21096?
CVE-2021-21096 is classified as an Improper Authorization vulnerability impacting the Genuine Software Service.