PT-2017-2934 · Kaspersky · Kaspersky Internet Security For Android

Publicado 2017-08-09 · Atualizado 2021-06-17 · CVE-2017-12817

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaspersky Internet Security for Android version 11.12.4.1622

Description The issue is related to the lack of encryption for some application trace files. This could allow a remote attacker to disclose confidential information.

Recommendations For Kaspersky Internet Security for Android version 11.12.4.1622, consider updating to a newer version that addresses the encryption issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Information Disclosure

Enumeração de Fraquezas

CWE-311

CWE-200

Identificadores relacionados

BDU:2017-02259

CVE-2017-12817

Produtos afetados

Kaspersky Internet Security For Android

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-12817 · Aviso do Fabricante
• https://support.kaspersky.com/vulnerability.aspx?el=12430#090817 · Aviso do Fabricante
• http://securityfocus.com/bid/100504 · Nota
• https://bdu.fstec.ru/vul/2017-02259 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-12817 · Nota de Segurança