1. Home
  2. CVE Database
  3. CVE-2021-21011
HIGH · 7.0

CVE-2021-21011

Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to...

Vulnerability Description

Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to the file system could leverage this vulnerability to escalate privileges.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AdobeCaptivate<= 11.5.1.499
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-427

References

FAQ

What is CVE-2021-21011?

CVE-2021-21011 is a vulnerability with a CVSS score of 7.0 (HIGH). Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to...

How severe is CVE-2021-21011?

CVE-2021-21011 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-21011?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Captivate, Microsoft Windows.