Vulnerability Intelligence Report
CVE-2020-35929
In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:1.03%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Kaspersky | TinyCheck | without commits 9fd360d and ea53de8 (affected) |
Threat Intelligence Signals
EPSS Score
1.031%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Kaspersky · Vendor · Russia |
| Reserved | 2020-12-31T00:00:00 |
| Published | 2021-01-19T16:53:36 |
| Last Updated | 2024-08-04T17:16:13 |
Community Chatter & Buzz