PT-2020-19948 · Bitdefender · Bitdefender Endpoint Security For Mac

Ricardo Ungureanu · Published 2020-08-03 · Updated 2020-08-04 · CVE-2020-8108

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security for Mac versions prior to 4.12.80

Description The issue is related to an Improper Authentication vulnerability, which allows an unprivileged process to restart the main service. This could potentially enable the injection of third-party code into a trusted process.

Recommendations For versions prior to 4.12.80, update to version 4.12.80 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-8108

Affected Products

Bitdefender Endpoint Security For Mac

References · 3

• https://osv.dev/vulnerability/CVE-2020-8108 · Vendor Advisory
• https://bitdefender.com/support/security-advisories/insufficient-client-validation-bitdefender-endpoint-security-mac-va-8759 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8108 · Security Note