CVE-2018-12829

9.8CRITICAL

Key Information:

Vendor
Adobe
Status
Adobe Creative Cloud Desktop Application Before 4.6.1
Vendor
CVE Published:
29 August 2018

Summary

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation.

Affected Version(s)

Adobe Creative Cloud Desktop Application before 4.6.1 Adobe Creative Cloud Desktop Application before 4.6.1

References

http://www.securityfocus.com/bid/105158
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1041600
vdb-entryx_refsource_SECTRACK
https://helpx.adobe.com/security/products/creative-cloud/...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.