Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an malicious user to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions before 6.6.27.390; versions before 7.1.2.33. Bitdefender Unified Endpoint versions before 6.2.21.160. Bitdefender GravityZone versions before 6.24.1-1.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
bitdefender endpoint security tools |
||
bitdefender gravityzone |
||
bitdefender gravityzone 6.24.1-1 |
Vulmon