CVE-2019-8286 — Sensitive Information Exposure in Anti-virus

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 41.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Kaspersky Anti-virusKaspersky Free Anti-virusKaspersky Internet Security+2 more
Timeline
PublishedJul 18
Latest updateMay 24

Description

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages5 packages

🔴Vulnerability Details

2
GHSA
GHSA-w896-5884-6r99: Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose u↗2022-05-24
▶
CVEList
CVE-2019-8286: Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose u↗2019-07-18
▶
CVE-2019-8286 — Sensitive Information Exposure | cvebase