← CVE Intelligence

CVE-2021-3959

Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145) PUBLISHED

Description (CNA)

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

Affected (CNA)

Vendor / productVersions
Bitdefender / GravityZoneaffected unspecified before 3.3.8.272

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.