Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q5j-8w8v-g89m

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system.

It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system.

EPSS

Процентиль: 99%
0.81581
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
больше 8 лет назад

It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system.

fstec
больше 8 лет назад

Уязвимость веб-интерфейса api/storage средства резервного копирования Unitrends Backup, позволяющая нарушителю обойти процедуру аутентификации или выполнить произвольные команды с root-правами

EPSS

Процентиль: 99%
0.81581
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-287