Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the victim's local machine. User interaction is required before product installation to abuse this vulnerability.

The version of Adobe Creative Cloud Desktop Application installed on the remote macOS host is prior to 5.6. It is, therefore, affected by multiple vulnerabilities.

  - Creation of a temporary file in a directory with incorrect permissions allows an authenticated, local     attacker to execute arbitrary code. (CVE-2021-43017)

  - Improper access control allows an unauthenticated, local attacker to escalate privileges. (CVE-2021-43019)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2021-43017

medium

Tenable Plugins

medium