Bitdefender Gravityzone

Improper Access Control vulnerability in the patchesUpdate API

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors.

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged.

Insecure PHP deserialization issue in GravityZone Console (VA-12634)

Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode

Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)

Verbose error handling issue in GravityZone Update Server proxy service

Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)

Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)

Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)

Insufficient validation on regular expression in EPPUpdateService config file (VA-9825)

Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)

Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)

SSRF in GravityZone Console via DNS Truncation (VA-12634)

Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)

Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter to webservice/CORE/downloadFullKitEpc/a/1 in the Web Console or (2) %2E%2E (encoded dot dot) in the default URI to port 7074 on the Update Server.