Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9r4h-6jqx-qw6h

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

EPSS

Процентиль: 99%
0.76006
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
больше 8 лет назад

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

fstec
больше 8 лет назад

Уязвимость протокола bpserverd средства резервного копирования Unitrends Backup, позволяющая нарушителю обойти процедуру аутентификации или выполнить произвольные команды с root-правами

EPSS

Процентиль: 99%
0.76006
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-287