PT-2017-2934 · Kaspersky · Kaspersky Internet Security For Android

Published 2017-08-09 · Updated 2021-06-17 · CVE-2017-12817

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaspersky Internet Security for Android version 11.12.4.1622

Description The issue is related to the lack of encryption for some application trace files. This could allow a remote attacker to disclose confidential information.

Recommendations For Kaspersky Internet Security for Android version 11.12.4.1622, consider updating to a newer version that addresses the encryption issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Information Disclosure

Weakness Enumeration

CWE-311

CWE-200

Related Identifiers

BDU:2017-02259

CVE-2017-12817

Affected Products

Kaspersky Internet Security For Android

References · 5

• https://osv.dev/vulnerability/CVE-2017-12817 · Vendor Advisory
• https://support.kaspersky.com/vulnerability.aspx?el=12430#090817 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02259 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12817 · Security Note
• http://securityfocus.com/bid/100504 · Note