Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following products that include the vulnerable component:
Bitdefender Endpoint Security for Linux version 7.0.5.200089
Bitdefender Endpoint Security for Windows version 7.9.9.380
GravityZone Control Center (On Premises) version 6.36.1
References
Configurations
Configuration 1 (hide)
|
History
07 Feb 2025, 18:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Bitdefender gravityzone Control Center
Bitdefender endpoint Security Bitdefender |
|
| References | () https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-the-gravityzone-productmanager-updateserver-kitsmanager-api-va-11466/ - Vendor Advisory | |
| CPE | cpe:2.3:a:bitdefender:gravityzone_control_center:6.36.1:*:*:*:on_premises:*:*:* cpe:2.3:a:bitdefender:endpoint_security:7.9.9.380:*:*:*:*:windows:*:* cpe:2.3:a:bitdefender:endpoint_security:7.0.5.200089:*:*:*:*:linux:*:* |
Information
Published : 2024-04-09 13:15
Updated : 2025-02-07 18:53
NVD link : CVE-2024-2224
Mitre link : CVE-2024-2224
CVE.ORG link : CVE-2024-2224
JSON object : View
Products Affected
bitdefender
- endpoint_security
- gravityzone_control_center
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')