Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-2223

Incorrect Regular Expression in GravityZone Update Server (VA-11465)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bitdefender

Description

An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component:  Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for  Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender GravityZone Control Center (On Premises)

Default version status: affected

  • 6.36.1affected

Bitdefender Endpoint Security for Windows

Default version status: unaffected

  • 7.9.9.380affected

Bitdefender Endpoint Security for Linux

Default version status: unaffected

  • 7.0.5.200089affected

References