CVE-2014-5350: Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote atta...

Security readout for executives and security teams

Bitdefender GravityZone versions before 5.1.11.432 had directory traversal flaws that could let a remote attacker read files from the appliance. For executives, the concern is exposure of a security management platform, where file disclosure can reveal sensitive configuration or operational data. Organizations running Bitdefender GravityZone before 5.1.11.432, especially where the Web Console or Update Server port 7074 is reachable from untrusted networks, are the likely exposure group. Prioritize remediation if any affected GravityZone instance is internet-facing or reachable by broad internal networks. Treat this as high business risk because compromise of a security management appliance can expose sensitive operational files. Mitigation focus: Confirm GravityZone is upgraded to 5.1.11.432 or later.; Restrict untrusted access to the Web Console and Update Server services.; Apply current Bitdefender hardening and firewall guidance..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.