Vulnerability Description
A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender GravityZone 6.24.1-1.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | Endpoint Security Tools | < 6.2.21.160 |
| Bitdefender | Gravityzone | 6.24.1-1 |
Related Weaknesses (CWE)
References
- https://www.bitdefender.com/support/security-advisories/insufficient-validation-Broken Link
- https://www.bitdefender.com/support/security-advisories/insufficient-validation-Broken Link
FAQ
What is CVE-2021-3552?
CVE-2021-3552 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects...
How severe is CVE-2021-3552?
CVE-2021-3552 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-3552?
Check the references section above for vendor advisories and patch information. Affected products include: Bitdefender Endpoint Security Tools, Bitdefender Gravityzone.