CVE-2020-9669

CWE-269 — Improper Privilege Management3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.9%

top 24.05%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe Creative Cloud Adobe Adobe Creative Cloud Desktop Application

Timeline

PublishedJul 17

Latest updateMay 24

Description

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lead to privilege escalation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5adobe/adobe_creative_cloud_desktop_applicationversions 5.1 and earlier

▶NVDadobe/creative_cloud5.1

🔴Vulnerability Details

GHSA

GHSA-hwfc-h7h7-q7gp: Adobe Creative Cloud Desktop Application versions 5↗2022-05-24

▶

CVEList

CVE-2020-9669: Adobe Creative Cloud Desktop Application versions 5↗2020-07-16

▶