CVE-2021-3959: falha de média gravidade em Bitdefender GravityZone
Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 1.7%
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Bitdefender · GravityZoneCVEs relacionadas — Bitdefender GravityZone
No mesmo produto, das mais perigosas para as menos.
CVE-2021-3554CRITICALImproper Access Control vulnerability in the patchesUpdate APIEPSS 2.1%CVE-2021-3552MEDIUMInsufficient validation on regular expression in EPPUpdateService config file (VA-9825)EPSS 1.3%CVE-2021-3553MEDIUMServer-Side Request Forgery in EPPUpdateService remote config file (VA-9825)EPSS 1.3%CVE-2022-0677HIGHImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)EPSS 1.2%CVE-2021-3641MEDIUMImproper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)EPSS 0.4%CVE-2021-3960HIGHPrivilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)EPSS 0.3%