CVE-2024-2224

CVSS V2 None CVSS V3 None

Description

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1

Overview

CVE ID
CVE-2024-2224

Assigner
Bitdefender

Vulnerability Status
PUBLISHED

Published Version
2024-04-09T13:01:47.416Z

Last Modified Date
2024-06-06T18:37:44.171Z

Weakness Enumerations

CWE	URL
CWE-22	http://cwe.mitre.org/data/definitions/22.html

References

Reference URL	Reference Tags
https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-the-gravityzone-productmanager-updateserver-kitsmanager-api-va-11466/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-2224
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2224

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 23:25:38				Added to TrackCVE