CVE-2020-27020: Weak Encryption
Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information (for example, time of password generation).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27020?
The severity of CVE-2020-27020 is considered moderate since it can allow an attacker to predict generated passwords under certain conditions.
How do I fix CVE-2020-27020?
To fix CVE-2020-27020, update Kaspersky Password Manager to version 9.2 or later depending on your platform.
Which versions of Kaspersky Password Manager are affected by CVE-2020-27020?
Kaspersky Password Manager versions prior to 9.2 for Windows and versions prior to 9.2.14.31 for iPhone OS and 9.2.14.872 for Android are affected.
What are the potential consequences of CVE-2020-27020?
The potential consequences of CVE-2020-27020 include the ability for attackers to predict passwords, compromising user accounts.
Who can be impacted by CVE-2020-27020?
Users of Kaspersky Password Manager on affected versions and operating systems can be impacted by CVE-2020-27020.