CVE-2021-3823CWE-22

Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode

High · published October 28, 2021

CVSS v3.1
7.1
EPSS
1%
Percentile
64.3
In the wild
Unconfirmed
What it is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects: Bitdefender GravityZone versions prior to 3.3.8.249.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01063 · 64.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-10-28T13:55Z
EPSS history
Timeline
  • 28 OCT 13:55Z
    Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode
    cvelistv5