CVE-2020-15279

—

CVSS 3.1

3.3 low

EPSS

<1%p40

Published

May 18, 2021 (May 18, 2021)

Modified

Jun 17, 2026

Description

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research.

Vendors: bitdefender
Products: endpoint security tools
Weakness: CWE-284
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.