CVE-2020-8103CWE-59

Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)

High · published June 5, 2020

CVSS v3.1
7.2
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to 1.0.17.178.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2020-06-05T11:10Z
EPSS history
Timeline
  • 05 JUN 11:10Z
    Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)
    cvelistv5