Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-4177

Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)

Description

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-2 that are running only on premise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender GravityZone Console On-Premise

Default version status: unaffected

  • 0 to < 6.38.1-2affected

References