Fiche vulnérabilité
CVE-2023-26358 : faille élevée Adobe Creative Cloud (desktop component) (CVSS 8.6)
Description
Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts.
En bref
- Sévérité
- Élevée (CVSS 8.6)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 22 mars 2023
- Dernière mise à jour
- 2 août 2024
Produits concernés
- Adobe Creative Cloud (desktop component)