Bitdefender Endpoint Security Tools For Linux vulnerabilities

CVE-2021-3554 [CRITICAL] CWE-284 CVE-2021-3554: Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoin Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdef

CVE-2022-0677 [HIGH] CWE-130 CVE-2022-0677: Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 2

CVE-2021-3485 [MEDIUM] CWE-494 CVE-2021-3485: An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Sec An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.155.