CVE-2020-15731CWE-20

Local Privilege Escalation in Bitdefender Engines (VA-8953)

Low · published September 30, 2020

CVSS v3.1
3.2
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows an attacker to write an arbitrary file in a location hardcoded in a specially-crafted malicious file name. This issue affects: Bitdefender Engines versions prior to 7.85448.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-09-30T11:55Z
EPSS history
Timeline
  • 30 SEP 11:55Z
    Local Privilege Escalation in Bitdefender Engines (VA-8953)
    cvelistv5