VULNERABILITY INTELLIGENCE
CVE-2020-8097
CVSS score8.1 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2020-08-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H
Description
An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- cve-requests@bitdefender.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory