CVE-2019-15688 — Open Redirect in Anti-virus

CWE-601 — Open Redirect3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 55.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Kaspersky Anti-virusKaspersky Internet SecurityKaspersky Security Cloud+2 more
Timeline
PublishedNov 26
Latest updateMay 24

Description

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. Bypass.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages5 packages

🔴Vulnerability Details

2
GHSA
GHSA-x257-265c-9355: Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Sec↗2022-05-24
▶
CVEList
CVE-2019-15688: Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Sec↗2019-11-26
▶
CVE-2019-15688 — Open Redirect in Kaspersky Anti-virus | cvebase