CVE-2020-15732

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security HSTS checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender...

CVE-2020-15732

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security HSTS checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender...

Input validation

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security HSTS checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender...

CVE-2020-15732

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security HSTS checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender...

CVE-2020-15732

CVE-2020-15732 is an improper certificate validation vulnerability in the Online Threat Prevention module used by several Bitdefender products (Total Security, Internet Security, Antivirus Plus). The issue potentially allows bypassing HTTP Strict Transport Security (HSTS) checks. Affected version...

CVE-2020-15732: Improper Certificate Validation

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security HSTS checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender...

PT-2021-9802

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 25.0.7.29 Bitdefender Internet Security versions prior to 25.0.7.29 Bitdefender Antivirus Plus versions prior to 25.0.7.29 Description The issue is related to an Improper Certificate Validation...

Bitdefender’s various products have vulnerabilities related to trust management.

Bitdefender Antivirus Plus is a suite of antivirus software that provides network threat detection and ransomware protection.Bitdefender Internet Security is a suite of antivirus software that focuses on Internet security. Bitdefender Antivirus Plus is a suite of antivirus programs that provides...

CVE-2021-3554

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions...

CVE-2021-3552

A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33...

PT-2021-5048

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65 Bitdefender Total Security versions prior to 7.2.1.65 Description The issue is related to incorrect default permissions in the bdservicehost.exe and...

CVE-2021-3485

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...

CVE-2021-3485

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...

Input validation

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...

CVE-2021-3485 Improper Input Validation in Bitdefender Endpoint Security Tools for Linux

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...

CVE-2021-3485

CVE-2021-3485 affects Bitdefender Endpoint Security Tools for Linux prior to 6.2.21.155. An Improper Input Validation in the Product Update feature allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. Remediation: update to...

Bitdefender Endpoint Security Tool has a vulnerability in input validation.

Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. An input validation error vulnerability exists in Product Update for Linux Bitdefender Endpoint Security Tools versions prior to 6.2.21.155, which can be exploited by an attacker to...

CVE-2021-3485: Download of Code Without Integrity Check

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...

PT-2021-20696 · Bitdefender · Bitdefender Endpoint Security Tools For Linux

Name of the Vulnerable Software and Affected Versions: Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.155 Description: An Improper Input Validation issue in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to...

CVE-2021-3485

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Securit...