Today > 1 Critical | 2 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-35214

Aug. 21, 2024, 12:30 p.m.

Tags

CWE-288
secure@blackberry.com
2024-08-20
CVE-2024-35214

Product(s) Impacted

CylanceOPTICS for Windows

  • 3.2
  • 3.3

Description

A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of CylancePROTECT.

Weaknesses

CWE-288
Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

CWE ID: 288

Date

Published: Aug. 20, 2024, 6:15 p.m.

Last Modified: Aug. 21, 2024, 12:30 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

secure@blackberry.com

References

https://support.blackberry.com/ secure@blackberry.com