• Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
    Dedicated community for Japanese speakers
  • 한국 커뮤니티
    Dedicated community for Korean speakers

Adobe Bridge: Fix unquoted service path for Windows services

New Here ,
Jul 11, 2022 Jul 11, 2022

Copy link to clipboard

Copied

Hi

 

Endpoint manager and our defender enterprise has flagged the following security vulnerability with our adobe bridge enterprise installs

 

An attacker can exploit this misconfiguration in order to perform path interception to gain escalation of privileges and persistency on the machine.

Service Path
C:\Program Files\WindowsApps\Adobe-Bridge-022_1.0.0.0_x64__enb9d4674ppy2\VFS\ProgramFilesCommonX86\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe

 

We had a few other scan messages on other older applications and i used the guide here to fix them using powershell

 

https://www.techiessphere.com/2017/06/how-to-fix-unquoted-service-path-vulnerability.html

 

However the folder path where the adobeupdateservice.exe lives is a protected folder and i cant see to be able to write to it to fix the vulnerability

 

Any ideas?

 

Thanks

 

TOPICS
How to , Problem or error

Views

140

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Jul 11, 2022 Jul 11, 2022

Copy link to clipboard

Copied

Report this to Adobe's security team, not here.

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Jul 11, 2022 Jul 11, 2022

Copy link to clipboard

Copied

Have you got an email address for them spoke to 4 different "agents" trying to explain the above without any success

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Jul 11, 2022 Jul 11, 2022

Copy link to clipboard

Copied

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Jul 13, 2022 Jul 13, 2022

Copy link to clipboard

Copied

Theres no actual email address useful there - cant face another hour in chat trying to explain the issue - dont they have a support email 

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Jul 13, 2022 Jul 13, 2022

Copy link to clipboard

Copied

LATEST

my bad will didnt check the bottom - thanks

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines