CVE-2020-15279: Scanning exclusion paths disclosure in BEST for Windows
First published: Tue May 18 2021(Updated: )
An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research.
Credit: cve-requests@bitdefender.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender Endpoint Security Tools | <6.6.23.320 |
Remedy
An automatic update to version 6.6.23.320 fixes the issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-15279.
What is the title of the vulnerability?
The title of the vulnerability is 'An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows'.
What is the severity of CVE-2020-15279?
CVE-2020-15279 has a severity level of medium.
How can a regular user exploit this vulnerability?
A regular user can exploit this vulnerability to learn the scanning exclusion paths.
Is there a fix available for this vulnerability?
Yes, a fix is available for this vulnerability. Users should update Bitdefender Endpoint Security Tools for Windows to version 6.6.23.320 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/remedy
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/bitdefender
- canonical/bitdefender endpoint security tools