CVE-2020-15024

MEDIUM

Avast Antivirus <20.1.5069.562 - Info Disclosure

Title source: llm

Description

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation.

References (1)

[Third Party Advisory, URL Repurposed] http://nestedif.com/avast-antivirus-password-manager-vulnerability-improper-session-handling-leading-to-information-disclosure-advisory/

Scores

CVSS v3 5.5

EPSS 0.0005

EPSS Percentile 16.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-212 CWE-459

Status published

Products (1)

avast/antivirus 20.1.5069.562

Published Sep 10, 2020

Tracked Since Feb 18, 2026