Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2021-3959

Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bitdefender

Description

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender GravityZone

  • unspecified to < 3.3.8.272affected

References