CVE-2020-8987 : Vulnerability Insights and Analysis

Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate certificates, allowing a man-in-the-middle to host a malicious website using a self-signed certificate.

Understanding CVE-2020-8987

This CVE highlights a vulnerability in Avast AntiTrack and AVG Antitrack that could be exploited by a man-in-the-middle attack.

What is CVE-2020-8987?

This CVE refers to the lack of certificate validation in Avast AntiTrack and AVG Antitrack, enabling potential exploitation by malicious actors.

The Impact of CVE-2020-8987

The vulnerability allows attackers to intercept traffic and host malicious websites, posing a significant risk to users' security and privacy.

Technical Details of CVE-2020-8987

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The issue lies in the failure to validate certificates in Avast AntiTrack and AVG Antitrack, exposing users to man-in-the-middle attacks.

Affected Systems and Versions

Avast AntiTrack before version 1.5.1.172
AVG Antitrack before version 2.0.0.178

Exploitation Mechanism

Attackers can exploit this vulnerability by using self-signed certificates to host malicious websites and intercept users' traffic.

Mitigation and Prevention

Protecting against CVE-2020-8987 is crucial for maintaining security.

Immediate Steps to Take

Update Avast AntiTrack and AVG Antitrack to the latest versions that address the certificate validation issue.
Avoid accessing sensitive information on unsecured networks.

Long-Term Security Practices

Use a reliable VPN to encrypt your internet connection and protect against man-in-the-middle attacks.
Regularly monitor for security updates and patches from Avast and AVG.
Educate users on the risks of unsecured connections and the importance of verifying website certificates.
Implement strong password practices and multi-factor authentication.

Patching and Updates

Ensure that all systems running Avast AntiTrack and AVG Antitrack are updated promptly with the latest security patches to mitigate the risk of exploitation.