CVE-2024-6980

Verbose error handling issue in GravityZone Update Server proxy service

CVSS 9.2 CRITICALEPSS 0.6%CWE-209

A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-5 running only on premise.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Bitdefender · GravityZone Update Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.bitdefender.com/consumer/support/support/security-advisories/verbose-error-handling-issue-in-gravityzone-update-server-proxy-service/