CVE-2020-8108 Insufficient client validation in Bitdefender Endpoint Security for Mac (VA-8759)

What is CVE-2020-8108?

CVE-2020-8108 is a high-severity authentication bypass vulnerability in Bitdefender Endpoint Security for Mac, published on 3 Aug 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart the main service and potentially inject third-party code into a trusted process. This issue affects: Bitdefender Endpoint Security for Mac versions prior to 4.12.80.

Weakness: CWE-287

Which versions are affected by CVE-2020-8108?

It affects 1 product.

Products include Bitdefender Endpoint Security.

How do I fix CVE-2020-8108?

No fix has been published for CVE-2020-8108 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2020-8108 being exploited?

There is no known exploitation of CVE-2020-8108 in the wild and no public exploit code.

Other vulnerabilities in Bitdefender Endpoint Security for Mac

• CVE-2024-2223 Incorrect Regular Expression in GravityZone Update Server (VA-11465) High 8.1
• CVE-2024-2224 Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466) High 8.1
• CVE-2020-8097 Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646) High 8.1
• CVE-2025-5317 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wcxg-jm87-f9v5.