CVE-2020-15297CWE-918

Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows…

High · published November 9, 2020

CVSS v3.1
7.1
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows an unprivileged attacker to bypass the in-place mitigations and interact with hosts on the network. This issue affects: Bitdefender Update Server versions prior to 6.6.20.294.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00859 · 58.1th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2020-11-09T08:25Z
EPSS history
Timeline
  • 09 NOV 08:25Z
    Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows…
    cvelistv5