Bitdefender Endpoint Security Tools CVE-2021-3554 Access Control Bypass Vulnerability

Description

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.1.2.33.

Affected Applications

Endpoint Security Tools

CVE References

Other References