cve/2019/CVE-2019-8286.md

### [CVE-2019-8286](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8286)
![](https://img.shields.io/static/v1?label=Product&message=Kaspersky%20Anti-Virus%2C%20Kaspersky%20Internet%20Security%2C%20Kaspersky%20Total%20Security&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=up%20to%202019%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Information%20Disclosure&color=brightgreen)

### Description

Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6

### POC

#### Reference
- https://support.kaspersky.com/general/vulnerability.aspx?el=12430#110719

#### Github
- https://github.com/189569400/Digital-Privacy
- https://github.com/bo453/test
- https://github.com/ffffffff0x/Digital-Privacy
- https://github.com/orgTestCodacy11KRepos110MB/repo-2250-Digital-Privacy
- https://github.com/threej-in/online-privacy