Skip to content
OpenAdvisories
Medium · 6.7 CVE-2021-35230 EUVD-2021-21873GHSA-m66r-9qpp-v37j

Unquoted Path Vulnerability (SMB Login) in Kiwi CatTools

Published Oct 22, 2021 · Updated Sep 16, 2024 · Assigned by SolarWinds

Description

As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry.

Affected products

VendorProductAffectedFixed
SolarWinds Kiwi CatTools unspecified – < 3.11.9 3.11.9

References