CVE-2021-3959— Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)

Quick assessment

Copy summary Copy citation

Affected

Bitdefender GravityZone

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Bitdefender Endpoint Security Tool是罗马尼亚比特梵德（Bitdefender）公司的一款终端安全管理工具。 Bitdefender Endpoint Security Tools 存在安全漏洞，该漏洞源于 Bitdefender Endpoint Security Tools 的 EPPUpdateService 组件中的服务器端请求伪造 (SSRF) 漏洞允许攻击者将请求代理到中继服务器。

CVE-2021-3959 affects Bitdefender GravityZone. No confirmed in-the-wild exploitation; assess based on exposure. Bitdefender Endpoint Security Tool是罗马尼亚比特梵德（Bitdefender）公司的一款终端安全管理工具。 Bitdefender Endpoint Security Tools 存在安全漏洞，该漏洞源于 Bitdefender Endpoint Security Tools 的 EPPUpdateService 组件中的服 CVE-2021-3959 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2021-3959

I. Basic Information for CVE-2021-3959

Affected Products

II. Public POCs for CVE-2021-3959

III. Intelligence Information for CVE-2021-3959

Other References for CVE-2021-3959 (1)

• https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-in-bitdefender-gravityzone-update-server-in-relay-mode-va-10145 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2021-3959

IV. Related Vulnerabilities