High severity8.1NVD Advisory· Published Jun 6, 2024· Updated Jun 17, 2026

CVE-2024-4177

Description

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-2 that are running only on premise.

Affected products

Bitdefender/Gravityzone2 versions
cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:on-premise:*:*:*+ 1 more
- cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:on-premise:*:*:*range: <6.38.1-2
- (no CPE)range: <6.38.1-2
Bitdefender/GravityZone Control Center (On Premises)cpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

www.cve.org/CVERecordnvdThird Party Advisory
bitdefender.com/consumer/support/support/security-advisories/host-whitelist-parser-issue-in-gravityzone-console-on-premise-va-11554/nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000