CVE-2020-9681
MEDIUMAdobe Genuine Service < 6.6 - Uncontrolled Search Path
Title source: ruleDescription
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of this issue requires user interaction.
Scores
CVSS v3
6.5
EPSS
0.0010
EPSS Percentile
27.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (1)
adobe/genuine_service
< 6.6
Timeline
Published
Apr 16, 2021
Tracked Since
Feb 18, 2026