Skip to content
OpenAdvisories
Unscored CVE-2022-27535 EUVD-2022-32036GHSA-xfx6-fh5x-72pf

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Servi…

Published Aug 5, 2022 · Updated Aug 3, 2024 · Assigned by Kaspersky

Description

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker.

Affected products

VendorProductAffectedFixed
— Kaspersky VPN Secure Connection for Windows prior to 21.6 —

References