CVE-2020-15731 LOW

CVE-2020-15731: Local Privilege Escalation in Bitdefender Engines (VA-8953)

Vendor Bitdefender
Product Bitdefender Engines
Weakness CWE-20 · Input validation
Published September 30, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

3.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows an attacker to write an arbitrary file in a location hardcoded in a specially-crafted malicious file name. This issue affects: Bitdefender Engines versions prior to 7.85448.

Key dates

02Disclosure timeline

September 30, 2020 CVE published
September 16, 2024 Record updated