CVE-2025-5317

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5317
An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the application directory (/Applications/Endpoint Security for Mac.app/) and the related directories within /Library/Bitdefender/AVP without needing the uninstall password.
CVSS

No CVSS.

References
Link Resource
https://www.bitdefender.com/support/security-advisories/improper-access-restriction-to-critical-folder-in-bitdefender-endpoint-security-tools-for-mac/
Configurations

No configuration.

History

11 Nov 2025, 09:15

Type Values Removed Values Added
References
  • {'url': 'https://bitdefender.com/consumer/security-advisories/improper-access-restriction-to-critical-folder-in-bitdefender-endpoint-security-tools-for-mac', 'source': '[email protected]'}
  • () https://www.bitdefender.com/support/security-advisories/improper-access-restriction-to-critical-folder-in-bitdefender-endpoint-security-tools-for-mac/ -

11 Nov 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-11 08:15

Updated : 2025-11-12 16:19

NVD link : CVE-2025-5317

Mitre link : CVE-2025-5317

CVE.ORG link : CVE-2025-5317

JSON object : View

Products Affected

No product.

CWE
CWE-862

Missing Authorization