What’s Vulnerable › Vulnerabilities

CVE-2020-15279: Scanning exclusion paths disclosure in BEST for Windows

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-18 · updated 2026-06-17
• Weakness: CWE-284

Description

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research.

Affected products

• Bitdefender Endpoint Security Tools: before 6.6.23.320 — fixed in 6.6.23.320

How to fix

Upgrade to a fixed version: Bitdefender Endpoint Security Tools 6.6.23.320. Check the vendor advisory for mitigations.

References

• https://www.bitdefender.com/support/security-advisories/scanning-exclusion-paths-disclosure-in-best-for-windows-va-9380
• https://www.bitdefender.com/support/security-advisories/scanning-exclusion-paths-disclosure-in-best-for-windows-va-9380

Get alerted when CVE-2020-15279 or the next vulnerability affects your stack