Vulnerability · Published Oct 21, 2020 · Assigned by adobe
CVE-2020-24425Privilege escalation vulnerability in Dreamweaver version 20.2
High 7.5
In plain English
A high-severity uncontrolled search path in Dreamweaver from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.7%top 47.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Dreamweaver | unspecified – through 20.2unspecified – through None |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
References
- https://helpx.adobe.com/security/products/dreamweaver/apsb20-55.html x_refsource_MISC