Access Control Vulnerability in K7AntiVirus Premium by K7 Computing
CVE-2018-11008

5.5MEDIUM

Key Information:

Vendor

K7computing

Status
Enterprise Security
Ultimate Security
Total Security
Antivrius
Vendor
CVE Published:
11 January 2021

What is CVE-2018-11008?

An Incorrect Access Control vulnerability has been identified in K7AntiVirus Premium, specifically in version 15.01.00.53. This flaw could potentially allow unauthorized users to access restricted features or data, leading to significant security risks. Users and administrators are advised to review their security posture and apply necessary updates from K7 Computing to mitigate this issue.

References

https://www.k7computing.com
x_refsource_MISC
https://support.k7computing.com/index.php?/selfhelp/view-...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.