CVE-2018-6328

Description

References

• support.unitrends.com/UnitrendsBackup/s/article/000001150 · Vendor Advisory
• support.unitrends.com/UnitrendsBackup/s/article/000006002 · Vendor Advisory
• exploit-db.com/exploits/44297 · Exploit
• exploit-db.com/exploits/45559 · Exploit

Autres vulnérabilités de unitrends backup

• CVE-2021-40386CRITIQUE 9.8Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.
• CVE-2021-43044CRITIQUE 9.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community.
• CVE-2021-43043MOYENNE 6.5An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow b…
• CVE-2021-43042CRITIQUE 9.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This was…
• CVE-2021-43041ÉLEVÉE 8.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerabilit…