Skip to content
OpenAdvisories
Medium · 4.0 CVE-2020-15279 EUVD-2020-7276GHSA-wv3v-p4hp-955f

Scanning exclusion paths disclosure in BEST for Windows

Published May 18, 2021 · Updated Sep 17, 2024 · Assigned by Bitdefender

Description

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research.

Affected products

VendorProductAffectedFixed
BItdefenderd Endpoint Security Tools for Windows unspecified – < 6.6.23.320 6.6.23.320

References