CVE-2018-6329

CRITICAL 9.8CVE-2018-6329 · Published 14/03/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
backup unitrends	`< 10.1.10`	`10.1.10`

Description

It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.

References

support.unitrends.com/UnitrendsBackup/s/article/000001150 · Vendor Advisory
support.unitrends.com/UnitrendsBackup/s/article/000006003 · Vendor Advisory
exploit-db.com/exploits/44297 · Exploit
exploit-db.com/exploits/45913 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free