CVE-2021-3641

Опубликовано: 09 нояб. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 3.6

EPSS Низкий

Описание

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.

Ссылки

https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921
Broken Link
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-143/
Third Party Advisory
VDB Entry
https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921
Broken Link
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-143/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:*:*:*:*

Версия до 7.1.2.33 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00041

Низкий

6.1 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

GHSA-mg9g-xrgm-6mf3

github

больше 3 лет назад