[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6joQiZICsxkmtDc3Xw6DfVho7BNKAwWIKnfzK_neBYc":3,"g5a-risk:CVE-2021-28597":138},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":66,"references":67,"referencesCount":73,"weaknesses":74,"weaknessesCount":90,"isActivelyExploited":91,"cisaInfo":27,"otxData":27,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":134,"notableEvents":135},"CVE-2021-28597","What is CVE-2021-28597?","Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.","Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could levera...","2021-06-28T15:15:23.683","2023-11-07T03:32:13.207",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":39,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":38,"ImpactScore":29},"078d4453-3bcd-4900-85e6-15281da43538","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",6.2,2.5,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":22,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":44,"AvailabilityImpact":23,"BaseScore":45,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00476,[48,48,48,48,48,48,48],"Medium",[52,57,62],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"adobe","photoshop_elements","*","cpe:2.3:a:adobe:photoshop_elements:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"apple","macos","-","cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":60,"criteria":65,"vulnerable":4},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",3,[68],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fhelpx.adobe.com\u002Fsecurity\u002Fproducts\u002Fphotoshop_elements\u002Fapsb21-46.html","Adobe",[72],"Vendor Advisory",1,[75,83],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-668","Exposure of Resource to Wrong Sphere","The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.","Resources such as files and directories may be inadvertently exposed through mechanisms such as insecure permissions, or when a program accidentally operates on the wrong object. For example, a program may intend that private files can only be provided to a specific user. This effectively defines a control sphere that is intended to prevent attackers from accessing these private files. If the file permissions are insecure, then parties other than the user will be able to access those files.\nA separate control sphere might effectively require that the user can only access the private files, but not any other files on the system. If the program does not ensure that the user is only requesting private files, then the user might be able to access other files on the system.\nIn either case, the end result is that a resource has been exposed to the wrong party.","Draft","Class","Simple",{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":82},"CWE-379","Creation of Temporary File in Directory with Insecure Permissions","The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.","On some operating systems, the fact that the temporary file exists may be apparent to any user with sufficient privileges to access that directory. Since the file is visible, the application that is using the temporary file could be known. If one has access to list the processes on the system, the attacker has gained information about what the user is doing at that time. By correlating this with the applications the user is running, an attacker could potentially discover what a user's actions are. From this, higher levels of security could be breached.","Incomplete","Base",2,false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2021-28597? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-28597, a medium severity cyber security vulnerability from 2021. Adobe Photoshop Elements version 5.2 (and earlier) is aff...","CVE-2021-28597, CVE-2021-28597 vulnerability, CVE-2021-28597 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, adobe security, apple security, microsoft security, photoshop_elements vulnerability, macos vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2021-28597",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-28597","Cybersecurity","CVE-2021-28597, CVE-2021-28597 vulnerability, CVE-2021-28597 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":120,"Negate":27,"Nodes":121},"AND",[122,128],{"Operator":123,"Negate":27,"CPEMatch":124},"OR",[125],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":127,"VersionEndIncluding":27},"9C236C25-B21C-46DA-824F-4CA8D9FB49FD","5.3",{"Operator":123,"Negate":27,"CPEMatch":129},[130,132],{"Vulnerable":27,"Criteria":61,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"387021A0-AF36-463C-A605-32EA7DAC172E",{"Vulnerable":27,"Criteria":65,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":137,"version":42},1793227259877,{"score":139,"band":140,"action":141,"scoredAt":142},20,"Low","Monitor","2026-10-28T06:51:18.286456+00:00"]