CVE-2024-4177

High

Description

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-2 that are running only on premise.

SeverityHigh

CVSS8.1

Exploit probability—

ProductBitdefender Gravityzone

PublishedJun 6, 2024

First seenJun 6, 2024

Weakness typeCWE-116CWE-116

How to fix

Update

bitdefender gravityzone6.38.1-2 or later

Vendor advisories

bitdefender.com/consumer/support/support/security-advisories/host-whitelist-parser-issue-in-gravityzone-console-on-premise-va-11554/

Affected products

Product	Affected versions	Fixed in
bitdefender gravityzone	v < 6.38.1-2	6.38.1-2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.