{"id":"CVE-2021-28597","state":"PUBLISHED","title":"Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link","description":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.","publishedAt":"2021-06-28T14:13:20.585Z","updatedAt":"2025-04-23T19:39:59.837Z","severity":{"score":6.2,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","source":"adobe"},"assigner":"adobe","products":["Adobe Photoshop Elements"],"affected":[{"vendor":"Adobe","product":"Photoshop Elements","versions":[{"version":"unspecified","status":"affected","lessThanOrEqual":"5.2","versionType":"custom"},{"version":"unspecified","status":"affected","lessThanOrEqual":"None","versionType":"custom"}]}],"references":["https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html"],"weaknesses":["CWE-379"],"ingestedAt":"2026-10-29T19:48:19.096Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/28xxx/CVE-2021-28597.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-28597","state":"PUBLISHED","datePublished":"2021-06-28T14:13:20.585Z","dateUpdated":"2025-04-23T19:39:59.837Z","assignerShortName":"adobe","assignerOrgId":"078d4453-3bcd-4900-85e6-15281da43538","dateReserved":"2021-03-16T00:00:00.000Z"},"containers":{"cna":{"title":"Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link","descriptions":[{"lang":"en","value":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction."}],"affected":[{"vendor":"Adobe","product":"Photoshop Elements","versions":[{"version":"unspecified","status":"affected","lessThanOrEqual":"5.2","versionType":"custom"},{"version":"unspecified","status":"affected","lessThanOrEqual":"None","versionType":"custom"}]}],"references":[{"url":"https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-379","description":"Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"adobe","dateUpdated":"2021-06-28T14:13:20.000Z","orgId":"078d4453-3bcd-4900-85e6-15281da43538"},"datePublic":"2021-06-08T00:00:00.000Z","source":{"discovery":"EXTERNAL"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@adobe.com","DATE_PUBLIC":"2021-06-08T23:00:00.000Z","ID":"CVE-2021-28597","STATE":"PUBLIC","TITLE":"Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Photoshop Elements","version":{"version_data":[{"version_affected":"<=","version_value":"5.2"},{"version_affected":"<=","version_value":"None"},{"version_affected":"<=","version_value":"None"},{"version_affected":"<=","version_value":"None"}]}}]},"vendor_name":"Adobe"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction."}]},"impact":{"cvss":{"attackComplexity":"Low","attackVector":"Local","availabilityImpact":"None","baseScore":6.2,"baseSeverity":"Medium","confidentialityImpact":"None","integrityImpact":"High","privilegesRequired":"None","scope":"Unchanged","userInteraction":"None","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)"}]}]},"references":{"reference_data":[{"name":"https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html","refsource":"MISC","url":"https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html"}]},"source":{"discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T21:47:33.016Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-23T13:13:00.502338Z","id":"CVE-2021-28597","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-23T19:39:59.837Z"}}]}}}