Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-9681 EUVD-2020-30465GHSA-h89x-6xrv-pf29

Adobe Genuine Service privilege escalation vulnerability

Published Apr 16, 2021 · Updated Sep 17, 2024 · Assigned by adobe

Description

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of this issue requires user interaction.

Affected products

VendorProductAffectedFixed
Adobe GoCart unspecified – ≤ 6.6, unspecified – ≤ None —

References