CVE-2020-8097

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
Bitdefender	Endpoinit Security Tools for Windows	>= unspecified, < 6.6.18.261
Bitdefender	Endpoint Security SDK	>= unspecified, < 6.6.18.261

References

Timeline

Published: Aug 30, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-80996.2A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantin CVE-2020-81007.5Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial CVE-2020-81018.8Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD CVE-2020-81028.8Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially cr CVE-2020-81037.1A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quar CVE-2020-81057.8OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows an attacker to inject command CVE-2020-81077.8A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settin CVE-2020-81088.8Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart the main service an CVE-2020-81097.5A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can res CVE-2020-81107.5A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-supplied data, which ca CVE-2020-81128.8opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a CVE-2020-81139.8GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.