CVE-2024-6980

A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-5 running only on premise.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve-requests@bitdefender.com

Published

2024-07-31

Last modified

2024-07-31

Weaknesses

CWE-209, CWE-918

Affected products

• Gravityzone (Bitdefender)
• Gravityzone Update Server (Bitdefender)

References

• https://www.bitdefender.com/consumer/support/support/security-advisories/verbose-error-handling-issue-in-gravityzone-up…