Vulnerability · Published Jun 5, 2020 · Assigned by Bitdefender
CVE-2020-8103Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)
High 7.2
In plain English
A high-severity security flaw in Bitdefender Antivirus Free from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.8%top 43.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to 1.0.17.178.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | Bitdefender Antivirus Free | unspecified – before 1.0.17.178 |
Weakness: CWE-59 · Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H