What is CVE-2021-28623?

CVE-2021-28623 is a medium-severity vulnerability in Adobe Premiere, classified under Creation of Temporary File in Directory with Insecure Permissions. CVSS score: 5.5/10. Published 2021-06-28.

How severe is CVE-2021-28623?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Adobe Premiere

CVE-2021-28623

Adobe Premiere Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privi…

EPSS: 0.005 (37.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Adobe Premiere — versions unspecified
Adobe Premiere_elements
Microsoft Windows

Weakness classification (CWE)

CWE-379 — Creation of Temporary File in Directory with Insecure Permissions
CWE-668 — Exposure of Resource to Wrong Sphere

References

psirt@adobe.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-28623?: CVE-2021-28623 is a medium-severity vulnerability in Adobe Premiere, classified under Creation of Temporary File in Directory with Insecure Permissions. CVSS score: 5.5/10. Published 2021-06-28.
How severe is CVE-2021-28623?: Medium severity. CVSS v3 base score is 5.5 out of 10.