CVE-2020-25045

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:kaspersky:security_center:*:*:*:*:*:*:*:*
cpe:2.3:a:kaspersky:security_center_web_console:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:16

Type Values Removed Values Added
References () https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720 - Broken Link () https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720 - Broken Link

Information

Published : 2020-09-02 20:15

Updated : 2024-11-21 05:16


NVD link : CVE-2020-25045

Mitre link : CVE-2020-25045

CVE.ORG link : CVE-2020-25045


JSON object : View

Products Affected

kaspersky

  • security_center
  • security_center_web_console
CWE
CWE-427

Uncontrolled Search Path Element