CVE-2024-4177

Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)

State: Published
Severity: 8.1 High
Published: Jun 6, 2024
Updated: Aug 1, 2024
Reserved: Apr 25, 2024

Description

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-2 that are running only on premise.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	Bitdefender

Weaknesses

CWE-116 Improper Encoding or Escaping of Output

Affected Products

Product	Versions
GravityZone Console On-PremiseBitdefender	before 6.38.1-2Affected

References

https://bitdefender.com/consumer/support/support/security-advisories/host-whitelist-parser-issue-in-gravityzone-console-on-premise-va-11554/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.