Skip to content
OpenAdvisories
High · 8.1 CVE-2024-4177 EUVD-2024-32736GHSA-g5m9-q65c-x6m4

Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)

Published Jun 6, 2024 · Updated Aug 1, 2024 · Assigned by Bitdefender

Description

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-2 that are running only on premise.

Affected products

VendorProductAffectedFixed
Bitdefender GravityZone Console On-Premise < 6.38.1-2 6.38.1-2

References