CVE-2020-8099: Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-8099.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location.'

Q: Which versions of Bitdefender Antivirus Free are affected?

Bitdefender Antivirus Free versions prior to 1.0.17 are affected.

Q: How severe is this vulnerability?

This vulnerability has a severity rating of 6.2 (High).

Q: How can I fix this vulnerability?

To fix this vulnerability, you should update Bitdefender Antivirus Free to version 1.0.17 or later.

Published Apr 21, 2020

Updated

A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.17.

Affected Software

1 affected component

Bitdefender Antivirus 2020<1.0.17

Remediation

Information

An automated update to version 1.0.17 or higher fixes the issue.

Event History

Apr 21, 2020

CVE Published

via MITRE·10:40 AM

Data Sourced

via MITRE·10:40 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-8099.

What is the title of this vulnerability?

The title of this vulnerability is 'A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location.'

Which versions of Bitdefender Antivirus Free are affected?