PT-2020-16707 · Quick Heal · Quick Heal Total Security

Ashutosh Barot · Published 2020-11-30 · Updated 2020-12-04 · CVE-2020-27585

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Quick Heal Total Security versions prior to 19.0

Description The issue allows attackers with local admin rights to modify sensitive anti-virus settings via a brute-force attack on the settings password. This can be exploited by attackers to compromise the security of the system.

Recommendations For versions prior to 19.0, update to version 19.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the settings password to prevent brute-force attacks until a patch is applied.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2020-27585

Affected Products

Quick Heal Total Security

References · 5

• 🔥 https://cyberworldmirror.com/quick-heal-addressed-multiple-vulnerabilities-in-version-19-update-now · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-27585 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27585 · Vendor Advisory
• https://t.me/cvenotify/6358 · Telegram Post
• https://t.me/cibsecurity/16949 · Telegram Post