PT-2020-14126 · Avast · Avast Antivirus

Published 2020-09-10 · Updated 2024-02-14 · CVE-2020-15024

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Avast Antivirus version 20.1.5069.562

Description A security issue was found in the Login Password feature of the Password Manager component. When a user logs out or performs a Lock Vault operation, the entered password remains stored in Windows main memory.

Recommendations For Avast Antivirus version 20.1.5069.562, consider disabling the Password Manager component until a patch is available to prevent potential exploitation.

Fix

Weakness Enumeration

CWE-459

CWE-212

Related Identifiers

CVE-2020-15024

Affected Products

Avast Antivirus

References · 3

• https://osv.dev/vulnerability/CVE-2020-15024 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15024 · Security Note
• http://nestedif.com/avast-antivirus-password-manager-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory · Note