CVE-2020-8099CWE-59

Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)

High · published April 21, 2020

CVSS v3.1
7.1
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.17.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00437 · 36.9th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2020-04-21T10:40Z
EPSS history
Timeline
  • 21 APR 10:40Z
    Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)
    cvelistv5