PT-2020-19945 · Bitdefender · Bitdefender Antivirus Free

Jimmy Bayne · Published 2020-04-21 · Updated 2020-04-29 · CVE-2020-8099

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Bitdefender Antivirus Free versions prior to 1.0.17

Description A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location.

Recommendations For versions prior to 1.0.17, update to version 1.0.17 or later to resolve the issue. As a temporary workaround, consider restricting access to quarantined files to prevent substitution and restoration to privileged locations.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2020-8099

Affected Products

Bitdefender Antivirus Free

References · 4

• https://osv.dev/vulnerability/CVE-2020-8099 · Vendor Advisory
• https://bitdefender.com/support/security-advisories/link-resolution-privilege-escalation-vulnerability-in-bitdefender-antivirus-free-va-8387 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8099 · Security Note
• https://t.me/cvenotify/2960 · Telegram Post