← Back

CVE-2019-15688

nvd nist
Published: Nov 26, 2019Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. Bypass.

Affected (6)

Kaspersky
5 products
Anti Virus
Internet Security
Security Cloud
Small Office Security
Total Security
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Kaspersky
Anti Virus
Up to 2020
Anti Virus
Up to 2020
Internet Security
Up to 2020
Security Cloud
Up to 2020
Small Office Security
Up to 7
Total Security
Up to 2020

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

Source: vulnerability@kaspersky.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.