CVE-2020-8097: Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646)
First published: Sun Aug 30 2020(Updated: )
An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261.
Credit: cve-requests@bitdefender.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender Endpoint Security | <6.6.18.261 | |
| Bitdefender Endpoint Security Tools | <6.6.18.261 |
Remedy
An automatic update to Bitdefender Endpoint Security Tools / Bitdefender Endpoint Security SDK version 6.6.18.261 or newer fixes the issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-8097?
CVE-2020-8097 is an improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK.
How does CVE-2020-8097 affect Bitdefender Endpoint Security Tools for Windows?
CVE-2020-8097 allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings in Bitdefender Endpoint Security Tools for Windows.
How does CVE-2020-8097 affect Bitdefender Endpoint Security SDK?
CVE-2020-8097 allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings in Bitdefender Endpoint Security SDK.
What is the severity of CVE-2020-8097?
CVE-2020-8097 has a severity rating of 7.8 (high).
How can I fix CVE-2020-8097?
To fix CVE-2020-8097, update Bitdefender Endpoint Security Tools for Windows or Bitdefender Endpoint Security SDK to version 6.6.18.261 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/remedy
- agent/references
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/tags
- vendor/bitdefender
- canonical/bitdefender endpoint security
- canonical/bitdefender endpoint security tools