PT-2024-5076 · Bitdefender · Gravityzone Console

N1Nj4Sec + 1 · Published 2024-06-06 · Updated 2024-06-11 · CVE-2024-4177

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: GravityZone Console versions prior to 6.38.1-2

Description: A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue is related to insufficient checking of incoming requests, which can be exploited by a remote attacker to perform an SSRF attack.

Recommendations: For GravityZone Console versions prior to 6.38.1-2, update to version 6.38.1-2 or later to resolve the issue. As a temporary workaround, consider restricting access to the proxy service to minimize the risk of exploitation.

Fix

Improper Encoding or Escaping of Output

SSRF

Weakness Enumeration

CWE-116

CWE-918

Related Identifiers

BDU:2024-05603

CVE-2024-4177

Affected Products

Gravityzone Console

References · 14

• https://bitdefender.com/consumer/support/support/security-advisories/host-whitelist-parser-issue-in-gravityzone-console-on-premise-va-11554 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-4177 · Security Note
• https://bdu.fstec.ru/vul/2024-05603 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4177 · Security Note
• https://twitter.com/CVEnew/status/1798635593330491504 · Twitter Post
• https://t.me/cvenotify/82156 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1798665735016997174 · Twitter Post
• https://twitter.com/vipr_lab/status/1799795171309031541 · Twitter Post
• https://vuldb.com/?id.267234 · Note
• https://t.me/pentestingnews/47893 · Telegram Post
• https://t.me/cvenotify/82871 · Telegram Post
• https://twitter.com/CveFindCom/status/1798633773325807854 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1799622595408728331 · Twitter Post