CVE-2025-5317

MediumCVSS 5.5/10Last modified Oct 18, 2026

Description

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the application directory (/Applications/Endpoint Security for Mac.app/) and the related directories within /Library/Bitdefender/AVP without needing the uninstall password.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Nov 11, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-531705.5Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affectCVE-2025-531713.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the fCVE-2025-531723.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the fCVE-2025-531734.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the fCVE-2025-531743.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the fCVE-2025-531753.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the fCVE-2025-531763.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the fCVE-2025-531773.9Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the scheduleCVE-2025-531784.8Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the scheduleCVE-2025-531797.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function sCVE-2025-53185.4A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due CVE-2025-531807.5Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function s
CVE-2025-5317: Medium severity, CVSS 5.5 | Vulnix