CVE-2021-40386

Description

References

• csirt.divd.nl/cves/CVE-2021-40386 · Third Party Advisory

Weitere Schwachstellen in unitrends backup

• CVE-2021-43044KRITISCH 9.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community.
• CVE-2021-43043MITTEL 6.5An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow b…
• CVE-2021-43042KRITISCH 9.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This was…
• CVE-2021-43041HOCH 8.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerabilit…
• CVE-2021-43040HOCH 8.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged vaultServer could be leveraged to create arbitrar…