Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2021-3485

Improper Input Validation in Bitdefender Endpoint Security Tools for Linux

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bitdefender

Description

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.155.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender Endpoint Security Tools for Linux

Default version status: unaffected

  • unspecified to < 6.2.21.155affected

References