QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-8092

Back to search

CVE-2020-8092

Published: Jan 29, 2020

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.1

1.6

LOW

Description

A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the Bitdefender Cloud. This issue affects: Bitdefender Bitdefender Antivirus for Mac versions prior to 8.0.0.

VendorProductVersions

Bitdefender

Bitdefender Antivirus for Mac

affected
unspecified - < 8.0.0

Weaknesses (CWE)

CWE-264

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N

Attack Vector

Physical

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now