CVE-2020-8097

An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate privileges or tamper with the product's security settings. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261. Bitdefender Endpoint Security SDK versions prior to 6.6.18.261.

• CWE-287
• CWE-287

• https://www.bitdefender.com/support/security-advisories/improper-authentication-vulnerability-bitdefender-endpoint-security-tools-endpoint-security-sdk-va-8646Vendor Advisory
• https://www.bitdefender.com/support/security-advisories/improper-authentication-vulnerability-bitdefender-endpoint-security-tools-endpoint-security-sdk-va-8646Vendor Advisory

Published

Aug 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8091svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 cou…6.1
• CVE-2020-8092A privilege escalation vulnerability in BDLDaemon as used in…5.5
• CVE-2020-8093A vulnerability in the AntivirusforMac binary as used in Bit…7.8
• CVE-2020-8094An untrusted search path vulnerability in testinitsigs.exe a…7.8
• CVE-2020-8095A vulnerability in the improper handling of junctions before…5.5
• CVE-2020-8096Untrusted Search Path vulnerability in Bitdefender High-Leve…5.3
• CVE-2020-8099A vulnerability in the improper handling of junctions in Bit…6.2
• CVE-2020-8100Improper Input Validation vulnerability in the cevakrnl.rv0 …7.5
• CVE-2020-8101Improper Neutralization of Special Elements used in a Comman…8.8
• CVE-2020-8102Improper Input Validation vulnerability in the Safepay brows…8.8
• CVE-2020-8103A vulnerability in the improper handling of symbolic links i…7.1
• CVE-2020-8105OS Command Injection vulnerability in the wirelessConnect ha…7.8