Unquoted Path Vulnerability (SMB Login) in Kiwi CatTools
CVE-2021-35230

6.7MEDIUM

Key Information:

Vendor

Solarwinds
Status
Kiwi Cattools
Vendor
CVE Published:
19 October 2021

What is CVE-2021-35230?

As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry.

Affected Version(s)

Kiwi CatTools < 3.11.9

References

https://www.solarwinds.com/trust-center/security-advisori...
x_refsource_MISC

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2021-35230 : Unquoted Path Vulnerability (SMB Login) in Kiwi CatTools