CVE-2020-35929
Critical
Description
In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data.
SeverityCritical
CVSS9.8
Exploit probability—
ProductKaspersky Tinycheck
PublishedJan 19, 2021
First seenJan 19, 2021
How to fix
Update
- kaspersky tinycheck2020-12-18 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaspersky tinycheck | v < 2020-12-18 | 2020-12-18 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.