Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information (for example, time of password generation).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
4/ Password managers? Kaspersky CVE-2020-27020 generated predictable passwords using a time-seeded PRNG. Tavis Ormandy found LastPass flaws allowing webpages to steal secrets and execute code. Some implement crackable encryption at rest or protocols that can be abused by MiTM.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kaspersky | password_manager | - | android | - |
| App | kaspersky | password_manager | - | iphone_os | - |
| App | kaspersky | password_manager | - | windows | - |
| App | kaspersky | password_manager | 9.2 | windows | - |