VULNERABILITY INTELLIGENCE

CVE-2020-9668

CVSS score7.8 HIGH
EPSS probability1.64%
CISA KEVNot currently listed
Published2021-04-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user.

Weakness classification

  • CWE-284: Improper Access Control

Primary references