CVE-2017-7279

CRITICAL 9.8CVE-2017-7279 · Published 12/04/2017 · updated 17/06/2026

In short

CVE-2017-7279 is a CRITICAL (CVSS 9.8) vulnerability affecting enterprise backup (unitrends).
Chance of exploitation in the next 30 days (EPSS): 4.4%, higher than 91.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterprise backup unitrends	`≤ 8.2.0-8`	No fix yet

Description

An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.

References

rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1 · Third Party Advisory

More vulnerabilities in enterprise backup

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

enterprise backup

unitrends

≤ 8.2.0-8

No fix yet

More vulnerabilities in enterprise backup

See all →