CVE-2025-5317mediumCWE-862

CVE-2025-5317: falha de média gravidade em Bitdefender Endpoint Security Tools for Mac

Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac

Publicada em 11 nov 2025 · Atualizada em 12 nov 2025

Seguir esta CVE + Monitorar Endpoint Security Tools

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 0.1%

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the application directory (/Applications/Endpoint Security for Mac.app/) and the related directories within /Library/Bitdefender/AVP without needing the uninstall password.

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Bitdefender · Endpoint Security Tools for Mac

Referências

https://www.bitdefender.com/support/security-advisories/improper-access-restriction-to-critical-folder-in-bitdefender-endpoint-security-tools-for-mac/