Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2021-35230

Unquoted Path Vulnerability (SMB Login) in Kiwi CatTools

Description

As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Kiwi CatTools

  • unspecified to < 3.11.9affected

References