CVE-2019-8286

4.3MEDIUM

Key Information:

Vendor
Kaspersky
Status
Kaspersky Anti-virus, Kaspersky Internet Security, Kaspersky Total Security
Vendor
CVE Published:
18 July 2019

Summary

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6

Affected Version(s)

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security up to 2019

References

https://support.kaspersky.com/general/vulnerability.aspx?...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/109300
vdb-entryx_refsource_BID

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.