CVE-2021-43019: Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability
Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability on the product installer. User interaction is required before product installation to abuse this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for the privilege escalation vulnerability in Adobe Creative Cloud?
The vulnerability ID for the privilege escalation vulnerability in Adobe Creative Cloud is CVE-2021-43019.
What is the severity of CVE-2021-43019?
CVE-2021-43019 has a severity rating of 7.8 (critical).
How does CVE-2021-43019 affect Adobe Creative Cloud?
CVE-2021-43019 affects Adobe Creative Cloud version 5.5 (and earlier) by enabling an unauthenticated attacker to remove files and escalate privileges under the context of SYSTEM.
How can an attacker exploit CVE-2021-43019?
An attacker can exploit CVE-2021-43019 by leveraging the vulnerability in the resources leveraged by the Setup.exe service.
Is Apple macOS affected by CVE-2021-43019?
No, Apple macOS is not affected by CVE-2021-43019.
How can I mitigate the risk of CVE-2021-43019?
To mitigate the risk of CVE-2021-43019, update Adobe Creative Cloud to a version that is not affected by the vulnerability.
Where can I find more information about CVE-2021-43019?
You can find more information about CVE-2021-43019 on the Adobe Security Bulletin APSB21-111 at the following link: https://helpx.adobe.com/security/products/creative-cloud/apsb21-111.html