CVE-2021-3552

Severity CVSS v4.0:
Pending analysis
Type:
CWE-918 Server-Side Request Forgery (SSRF)
Publication date:
24/11/2021
Last modified:
01/12/2021

Description

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender GravityZone 6.24.1-1.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:-:*:* 6.2.21.160 (excluding)
cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:*:*:* 6.6.27.0 (including) 6.6.27.390 (excluding)
cpe:2.3:a:bitdefender:endpoint_security_tools:*:*:*:*:*:*:*:* 7.0.0.00 (including) 7.1.2.33 (excluding)
cpe:2.3:a:bitdefender:gravityzone:6.24.1-1:*:*:*:*:*:*:*