CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-3960

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects Bitdefender GravityZone versions prior to 3.3.8.272

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 14.3%

CVSS Severity

CVSS v3 Score 7.1

CVSS v2 Score 4.6

References

https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-the-gravityzone-productmanager-updateserver-kitsmanager-api-va-10146
https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-the-gravityzone-productmanager-updateserver-kitsmanager-api-va-10146

Products affected by CVE-2021-3960

Bitdefender » Gravityzone » Version: N/A

cpe:2.3:a:bitdefender:gravityzone:-
Bitdefender » Gravityzone » Version: 3.3.8.249

cpe:2.3:a:bitdefender:gravityzone:3.3.8.249

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3960

Products

Pricing

Contact Us