PT-2019-4141 · Google+2 · Google Chrome+2

Mohamed Ouad + 1 · Published 2013-11-15 · Updated 2020-08-24 · CVE-2019-15684

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kaspersky Protection extension for Google Chrome versions prior to 30.112.62.0

Description The issue is related to improper authorization in the Kaspersky Protection extension for Google Chrome, allowing unauthorized access to its features. This could lead to the removal of other installed extensions by a remote attacker.

Recommendations For versions prior to 30.112.62.0, update to version 30.112.62.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the extension's features until the update is applied.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

ALT-PU-2013-1119

BDU:2019-04721

CVE-2019-15684

Affected Products

Alt Linux

Google Chrome

Kaspersky Protection Extension

References · 6

• https://bdu.fstec.ru/vul/2019-04721 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-15684 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15684 · Vendor Advisory
• https://palant.de/2019/11/27/assorted-kaspersky-vulnerabilities · Note
• https://symantec.com/security-center/vulnerabilities/writeup/110997 · Note
• https://support.kaspersky.com/general/vulnerability.aspx?el=12430#251119_1 · Note