PT-2019-6049
CVE-2019-8076
·
Published
2019-09-10
·
Updated
2021-07-21
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Adobe Application Manager version 10.0
Description
The issue is related to an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user. The vulnerability is also associated with an uncontrolled search path element, which could allow a remote attacker to execute arbitrary code.
Recommendations
For Adobe Application Manager version 10.0, consider restricting the use of the vulnerable installer until a patch is available. As a temporary workaround, avoid using the installer in environments where it could be exploited. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾