| Package | Affected versions | Patched versions |
|---|---|---|
| gravityzone | ≤ 5.1.5.386 |
Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter to webservice/CORE/downloadFullKitEpc/a/1 in the Web Console or (2) %2E%2E (encoded dot dot) in the default URI to port 7074 on the Update Server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free