Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646)
CVE-2020-8097

8.1HIGH

Key Information:

Vendor

Bitdefender

Status
Endpoinit Security Tools For Windows
Endpoint Security Sdk
Vendor
CVE Published:
30 August 2020
đź”” Create Bitdefender Vulnerability Alert

What is CVE-2020-8097?

An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261.

Affected Version(s)

Endpoinit Security Tools for Windows < 6.6.18.261

Endpoint Security SDK < 6.6.18.261

References

https://www.bitdefender.com/support/security-advisories/i...
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nicolas VERDIER, Senior IT Security Consultant at Tehtris
.