Endpoint Security for Linux vulnerabilities

2 known vulnerabilities in Endpoint Security for Linux from Bitdefender. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  GravityZone Control Center (On Premises): Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-2224Apr 9, 2024Bitdefender

  Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following product

• 9.8 Critical severity

  GravityZone Control Center (On Premises): Incorrect Comparison

  CVE-2024-2223Apr 9, 2024Bitdefender

  An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component: Bitdefe