CVE-2020-35929: Critical severity kaspersky tinycheck vulnerability
In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-35929?
CVE-2020-35929 is classified as a medium severity vulnerability due to the potential for unauthorized access to sensitive data.
How do I fix CVE-2020-35929?
To fix CVE-2020-35929, update to a version of TinyCheck that does not contain hard-coded credentials, specifically after the commits 9fd360d and ea53de8.
What are the risks associated with CVE-2020-35929?
The risks associated with CVE-2020-35929 include unauthorized access to the backend of TinyCheck, which can compromise remote data.
Which versions of TinyCheck are affected by CVE-2020-35929?
TinyCheck versions before the commit 9fd360d and up to 2020-12-18 are affected by CVE-2020-35929.
Is a patch available for CVE-2020-35929?
Yes, a patch is available through updated versions of TinyCheck that address the hard-coded credentials vulnerability.