CVE-2020-27020

2021-05-1411:00:04

Kaspersky

www.cve.org

kaspersky

password manager

weak encryption

EPSS

0.002

Percentile

55.9%

JSON

Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information (for example, time of password generation).

CNA Affected

[
  {
    "product": "Kaspersky Password Manager for Windows, Kaspersky Password Manager for Android, Kaspersky Password Manager for iOS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "KPM for Windows prior to 9.2 Patch F, KPM for Android prior to 9.2.14.872, KPM for iOS prior to 9.2.14.31"
      }
    ]
  }
]

References

support.kaspersky.com/general/vulnerability.aspx?el=12430#270421

EPSS

0.002

Percentile

55.9%

JSON

Related for CVELIST:CVE-2020-27020