CVE-2007-5006

Опубликовано: 01 окт. 2007

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:4.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:sp1:*:*:*:*:*:*

cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.5:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:desktop_management_suite:11.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:desktop_management_suite:11.2:*:*:*:*:*:*:*

cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01783

Низкий

10 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-f3fm-5grc-52pj

github

почти 4 года назад