CVE-2018-12829 - Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability

Back Back to CVE browser

CRITICAL

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability

Published Aug 29, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 5.07%

Description

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation.

Affected products

Vendor n/a Product Adobe Creative Cloud Desktop Application before 4.6.1 Default
n/a
- Version
  Adobe Creative Cloud Desktop Application before 4.6.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Adobe Creative Cloud Desktop Application before 4.6.1

n/a

Version	Status	Constraints
Adobe Creative Cloud Desktop Application before 4.6.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (3)

http://www.securityfocus.com/bid/105158
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041600
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/creative-cloud/apsb18-32.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/105158		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041600		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/creative-cloud/apsb18-32.html		x_refsource_CONFIRMVendor Advisory