CVE-2017-12817 — Missing Encryption of Sensitive Data in LAB Kaspersky Internet Security FOR Android 11.12.4.1622

CWE-311 — Missing Encryption of Sensitive Data3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 60.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Kaspersky LAB Kaspersky Internet Security FOR Android 11.12.4.1622Kaspersky Internet Security
Timeline
PublishedAug 25
Latest updateMay 13

Description

In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5kaspersky_lab/kaspersky_lab_kaspersky_internet_security_for_android_11.12.4.1622Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622
▶NVDkaspersky/internet_security11.12.4.1622

🔴Vulnerability Details

2
GHSA
GHSA-pcx2-7279-4vjc: In Kaspersky Internet Security for Android 11↗2022-05-13
▶
CVEList
CVE-2017-12817: In Kaspersky Internet Security for Android 11↗2017-08-25
▶
CVE-2017-12817 — Missing Encryption of Sensitive Data | cvebase