Permissions, Privileges, and Access Controls in Endpoint Security Tools and Bitdefender Total Security - CVE-2021-3576

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions within the "SeImpersonatePrivilege", which leads to security restrictions bypass and privilege escalation.

Affected software

How to mitigate CVE-2021-3576

External References

• https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-seimpersonateprivilege-in-bitdefender-endpoint-security-tools-va-9848/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1276/
• https://www.zerodayinitiative.com/advisories/ZDI-21-1376/

Related Security Bulletins

• Privilege escalation in Bitdefender Endpoint Security Tools and Total Security