Lucene search

BitdefenderCVELIST:CVE-2019-17100

HistoryJan 27, 2020 - 1:55 p.m.

CVE-2019-17100 Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)

2020-01-2713:55:17

CWE-426

Bitdefender

www.cve.org

CVSS3

5.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

Percentile

12.6%

JSON

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69.

CNA Affected

[
  {
    "product": "bdserviceshost.exe",
    "vendor": "Bitdefender",
    "versions": [
      {
        "lessThanOrEqual": "24.0.12.69",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-bitdefender-total-security-2020-va-5895/