CVE Feed

    Dashboard / CVE / CVE-2023-49567

    CVE-2023-49567

    A vulnerability has been identified in the Bitdefender Total Security HTTPS scanning functionality where the product incorrectly checks the site's certificate, which allows an attacker to make MITM SSL connections to an arbitrary site. The product trusts certificates that are issued using the MD5 and SHA1 collision hash functions which allow attackers to create rogue certificates that appear legitimate.

    Published:Oct 18, 2024
    Last Modified:Oct 22, 2024
    EPS:Oct 18, 2024
    EPSS Score:0.00057
    CVSS Score:6.8

    Affected Products

    Vendor
    Bitdefender
    Product
    Total Security

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2026-6851 (CVSS 7) — An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as…
    CVE-2025-7073 (CVSS 8.8) — A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows …
    CVE-2023-49570 (CVSS 8.6) — A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the softw…
    CVE-2023-6058 (CVSS 8.6) — A vulnerability has been identified in Bitdefender Safepay's handling of HTTPS connections. The issue arises w…
    CVE-2023-6057 (CVSS 8.6) — A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in…
    CVE-2023-6056 (CVSS 8.6) — A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in…
    CVE-2023-6055 (CVSS 8.6) — A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the softw…
    CVE-2023-6154 (CVSS 7.8) — A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Sec…
    CVE-2022-0357 (CVSS 6.7) — Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Securit…
    CVE-2021-4199 (CVSS 7.8) — Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.e…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High