Improper access control

2021-11-2416:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1.

CPENameOperatorVersion
endpoint_security_toolsge7.0.0.00
endpoint_security_toolslt7.1.2.33
endpoint_security_toolslt6.6.27.390
endpoint_security_toolslt6.6.27.390
gravityzoneeq6.24.1-1
gravityzoneeq< 6.24.1-1

Name	Operator	Version
endpoint_security_tools	ge	7.0.0.00
endpoint_security_tools	lt	7.1.2.33
endpoint_security_tools	lt	6.6.27.390
endpoint_security_tools	lt	6.6.27.390
gravityzone	eq	6.24.1-1
gravityzone	eq	< 6.24.1-1