Vulnerability Name: | CCN-94641 | ||||||
Published: | 2014-07-16 | ||||||
Updated: | 2014-07-16 | ||||||
Summary: | Bitdefender GravityZone contains default hardcoded credentials. An attacker could exploit this vulnerability to gain access to the system. | ||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||
CVSS v2 Severity: | 7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||
Vulnerability Consequences: | Gain Access | ||||||
References: | Source: CCN Type: BugTraq Mailing List, Wed Jul 16 2014 - 07:19:33 CDT SEC Consult SA-20140716-3 :: Multiple critical vulnerabilities in Bitdefender GravityZone Source: CCN Type: Bitdefender Web site GravityZone Source: CCN Type: BID-68669 Bitdefender GravityZone Authentication Bypass and Unauthorized Access Vulnerabilities Source: XF Type: UNKNOWN gravityzone-default-account(94641) Source: CCN Type: Packet Storm Security [07-16-2014] Bitdefender GravityZone File Disclosure / Missing Authentication Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [07-16-2014] | ||||||
Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
BACK |