← Database

CVE-2021-35230

MEDIUM CVSS: 6.7 Published: 2021-10-22 Modified: 2026-06-17

Description

As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of the affected service or uninstall entry.

Affected Platforms

Solarwinds Kiwi Cattools

Weakness Type

CWE-22, CWE-22

References