CVE-2020-35929: Kaspersky Tinycheck

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data.

Affected products

• Kaspersky Tinycheck: before 2020-12-18 (fixed in 2020-12-18)

Published 2021-01-19. Last modified 2026-06-17.