Home

CVE-2021-3960

Description

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects Bitdefender GravityZone versions prior to 3.3.8.272

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.047

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-3959,CVE-2021-3960 are affected in Bitdefender GravityZone Update Server 3.3.8.249Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234