Link following in Kaspersky VPN Secure Connection - CVE-2022-27535
Published: August 5, 2022 / Updated: August 9, 2022
Vulnerability identifier: #VU66134
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-27535
CWE-ID: CWE-59
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insecure link following when deleting folders via support tools. A local user can create a specially crafted symbolic link to a critical folder on the system and delete it via "Delete service data and reports" feature, which can result in future privilege escalation.
Affected software
Kaspersky VPN Secure Connection
How to mitigate CVE-2022-27535
Install updates from vendor's website.
Kaspersky VPN Secure Connection - update to 21.7.7.393