CVE-2021-35052

Опубликовано: 23 нояб. 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High.

Ссылки

https://support.kaspersky.com/general/vulnerability.aspx?el=12430#221121
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1335/
Third Party Advisory
VDB Entry
https://support.kaspersky.com/general/vulnerability.aspx?el=12430#221121
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1335/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kaspersky:password_manager:*:*:*:*:*:windows:*:*

Версия до 9.0.1 (включая)

cpe:2.3:a:kaspersky:password_manager:9.0.2:-:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_a:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_b:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_c:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_d:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_e:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_f:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_g:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_h:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_i:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_j:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_k:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_l:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_m:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_n:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_o:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_p:*:*:*:windows:*:*

cpe:2.3:a:kaspersky:password_manager:9.0.2:patch_q:*:*:*:windows:*:*

EPSS

Процентиль: 36%

0.00153

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-269

Связанные уязвимости

GHSA-4cg4-9g5h-4f6m

github

больше 3 лет назад