CVE-2024-2224highCWE-22

CVE-2024-2224: falha de alta gravidade em Bitdefender Endpoint Security for Linux

Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Endpoint Security+ Monitorar GravityZone Control Center

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.1epss 0.7%
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Bitdefender · Endpoint Security for LinuxBitdefender · Endpoint Security for WindowsBitdefender · GravityZone Control Center (On Premises)
CVEs relacionadas — Bitdefender Endpoint Security for Linux

No mesmo produto, das mais perigosas para as menos.

CVE-2024-2223HIGH Incorrect Regular Expression in GravityZone Update Server (VA-11465)EPSS 0.5%