CVE-2020-15279: 
Bitdefender Endpoint Security Tools vulnerability analysis and mitigation

CVE-2020-15279 is an Improper Access Control vulnerability affecting the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320. The vulnerability was discovered in the logging functionality of the software (NVD).

The vulnerability is classified as an Improper Access Control (CWE-284) issue, though a more specific classification of CWE-863 was later recommended. The CVSS metrics indicate a Local attack vector with Low attack complexity. While initially assessed with no required privileges, it was later determined that some privilege level was needed for exploitation. The vulnerability has a CVSS base score that reflects Low confidentiality impact, with no impact on integrity or availability (NVD).

The vulnerability's primary impact is on confidentiality, with a Low severity rating. The exploitation could lead to unauthorized disclosure of information through the logging component, while maintaining system integrity and availability unaffected (NVD).

The vulnerability requires local access to the affected system for exploitation. The attack complexity is rated as Low, indicating that specialized access conditions or extenuating circumstances are not required for exploitation. However, some level of privileges is required to execute the attack (NVD).

The vulnerability was addressed in Bitdefender Endpoint Security Tools for Windows version 6.6.23.320. Users should upgrade to this version or later to mitigate the vulnerability (NVD).