CVE-2019-8071 Privilege escalation in Adobe Download Manager

What is CVE-2019-8071?

CVE-2019-8071 is a critical vulnerability in Adobe Download Manager, published on 17 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.

Weakness: CWE-732

Which versions are affected by CVE-2019-8071?

It affects 1 product.

Products include Adobe Download Manager.

How do I fix CVE-2019-8071?

No fix has been published for CVE-2019-8071 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-8071 being exploited?

There is no known exploitation of CVE-2019-8071 in the wild and no public exploit code.

Other vulnerabilities in Adobe Download Manager

• CVE-2010-0189 Other in n/a Critical 9.3
• CVE-2020-9688 Command injection in Adobe Download Manager High 7.8
• CVE-2006-5856 Memory corruption in n/a Medium 6.8
• CVE-2022-2926 Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal Medium 4.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4h9r-m5mg-85ph.