CVE-2021-36002
Assigner: adobe
Published: 2021-08-17T00:00:00
State: PUBLISHED
affected: product: Captivate
vendor: Adobe
versions: lessThanOrEqual: 11.5.5
status: affected
version: unspecified
versionType: custom
lessThanOrEqual: None
status: affected
version: unspecified
versionType: custom
datePublic: 2021-08-17T00:00:00
descriptions: value: Adobe Captivate version 11.5.5 (and earlier) is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must plant a malicious file in a particular location of the victim's machine. Exploitation of this issue requires user interaction in that a victim must launch the Captivate Installer.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-379
description: Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
type: CWE
source: discovery: EXTERNAL
title: Adobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation