KLA10461 Security bypass vulnerability in multiple products

Using of the same certificate was found in multiple products. By exploiting this vulnerability malicious users bypass security restrictions. This vulnerability can be exploited remotely via a man-in-the-middle attack.

Original advisories

Related products

VisualDiscovery

CVE list

CVE-2015-2077 critical

Solution

Remove vulnerable software, if you are not sure in your safety.

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Superfish VisualDiscoveryLavasoft Ad-Aware Web Companion 1.1.885.1766Ad-Aware AdBlocker (alpha) 1.3.69.1Qustodio for WindowsAtom SecurityInc. StaffCop 5.8