The vulnerability of the software development platform for endpoint protection, MetaDefender Endpoint Security SDK (formerly OESIS), and the software for secure remote access to data, Palo Alto Networks GlobalProtect App, for Windows operating systems, stems from deficiencies in access control. This allows attackers to enhance their privileges.

The vulnerability of the MetaDefender Endpoint Security SDK formerly OESIS and the Palo Alto Networks GlobalProtect App software for securing remote access to data on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhan...

CVE-2025-0131: Incorrect Privilege Assignment

An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However,...

Vulnerability fixed in Bitdefender Endpoint Security

Bitdefender has fixed an update in Bitdefender Endpoint Security Tools and the Endpoint Security SDK. The vulnerability could potentially be exploited by a malicious party to obtain elevated user privileges and manipulate data. Bitdefender categorizes this vulnerability according to the CVSSv3...

PT-2020-19944

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261 Bitdefender Endpoint Security SDK versions prior to 6.6.18.261 Description An improper authentication issue allows an unprivileged local attacker to escalate privileg...

CVE-2020-8097: Improper Authentication

An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools fo...