CVE-2021-35052 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Kaspersky	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Vendor	Product	Version
kaspersky	password_manager	𝑥 ≤ 9.0.1
kaspersky	password_manager	9.0.2
kaspersky	password_manager	9.0.2:patch_a
kaspersky	password_manager	9.0.2:patch_b
kaspersky	password_manager	9.0.2:patch_c
kaspersky	password_manager	9.0.2:patch_d
kaspersky	password_manager	9.0.2:patch_e
kaspersky	password_manager	9.0.2:patch_f
kaspersky	password_manager	9.0.2:patch_g
kaspersky	password_manager	9.0.2:patch_h
kaspersky	password_manager	9.0.2:patch_i
kaspersky	password_manager	9.0.2:patch_j
kaspersky	password_manager	9.0.2:patch_k
kaspersky	password_manager	9.0.2:patch_l
kaspersky	password_manager	9.0.2:patch_m
kaspersky	password_manager	9.0.2:patch_n
kaspersky	password_manager	9.0.2:patch_o
kaspersky	password_manager	9.0.2:patch_p
kaspersky	password_manager	9.0.2:patch_q

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-269 - Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References

https://support.kaspersky.com/general/vulnerability.aspx?el=12430#221121

https://www.zerodayinitiative.com/advisories/ZDI-21-1335/

https://support.kaspersky.com/general/vulnerability.aspx?el=12430#221121

https://www.zerodayinitiative.com/advisories/ZDI-21-1335/