CVE-2020-8099 - Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)

Back Back to CVE browser

HIGH

Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)

Published Apr 21, 2020

7.1

HIGH

CVSS 3.1

EPSS 0.44%

Description

A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.17.

Affected products

Vendor Bitdefender Product Antivirus Free Default
unknown
Affected
- ≥ unspecified, < 1.0.17

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Bitdefender	Antivirus Free	unknown	Affected ≥ unspecified, < 1.0.17

Remediation

Vendor solution

An automated update to version 1.0.17 or higher fixes the issue.

Weaknesses (1)

CWE-59

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29010
Advisory
https://www.bitdefender.com/support/security-advisories/link-resolution-privilege-escalation-vulnerability-in-bitdefender-antivirus-free-va-8387/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29010		Advisory
https://www.bitdefender.com/support/security-advisories/link-resolution-privilege-escalation-vulnerability-in-bitdefender-antivirus-free-va-8387/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Bitdefender

Published Apr 21, 2020

Updated Sep 16, 2024

Reserved Jan 28, 2020

Link CVE-2020-8099

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8099

Red Hat

No data

ENISA EUVD

Assigner Bitdefender

Published Apr 21, 2020

Updated Sep 16, 2024

Link EUVD-2020-29010

GitHub

No data