CVE-2021-3641mediumCWE-59

CVE-2021-3641: falha de média gravidade em Bitdefender GravityZone

Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar GravityZone

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.1epss 0.4%
Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Produtos afetados
Bitdefender · GravityZone
CVEs relacionadas — Bitdefender GravityZone

No mesmo produto, das mais perigosas para as menos.

CVE-2021-3554CRITICALImproper Access Control vulnerability in the patchesUpdate APIEPSS 2.1%CVE-2021-3959MEDIUMServer-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)EPSS 1.7%CVE-2021-3552MEDIUMInsufficient validation on regular expression in EPPUpdateService config file (VA-9825)EPSS 1.3%CVE-2021-3553MEDIUMServer-Side Request Forgery in EPPUpdateService remote config file (VA-9825)EPSS 1.3%CVE-2022-0677HIGHImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)EPSS 1.2%CVE-2021-3960HIGHPrivilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)EPSS 0.3%