Skip to content
OpenAdvisories
Medium · 6.8 CVE-2021-3959 EUVD-2021-27167GHSA-f622-26hm-xgj8

Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)

Published Dec 16, 2021 · Updated Sep 17, 2024 · Assigned by Bitdefender

Vendor: Bitdefender Product: GravityZone

Description

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

Affected products

VendorProductAffectedFixed
Bitdefender GravityZone unspecified – < 3.3.8.272 3.3.8.272

References