title: Adobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information Disclosure
description: Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver references, potentially resulting in information disclosure.
problem types: Untrusted Search Path (CWE-426)
affected:
{
product: Dreamweaver
vendor: Adobe
versions:
lessThanOrEqual: 21.0, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 20.2, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: None, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]