CVE-2020-15731

Name of the Vulnerable Software and Affected Versions Bitdefender Engines versions prior to 7.85448

Description An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows an attacker to write an arbitrary file in a location hardcoded in a specially-crafted malicious file name.

Recommendations For Bitdefender Engines versions prior to 7.85448, update to version 7.85448 or later to resolve the issue. As a temporary workaround, consider restricting file renaming and recovery operations to minimize the risk of exploitation.