PT-2021-2439 · Kaspersky · Kaspersky Endpoint Security

Published

2021-03-30

·

Updated

2021-03-30

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security (affected versions not specified)
Description: The issue is related to insufficient checking of file paths for reparse points in the Web-Antivirus component. This could allow an attacker to impact data integrity.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2021-01779

Affected Products

Kaspersky Endpoint Security