PT-2015-5946 · Kaseya · Kaseya Virtual System Administrator

Pedro Ribeiro · Publicado 2015-07-20 · Atualizado 2019-02-05 · CVE-2015-2863

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kaseya Virtual System Administrator (VSA) versions 7.x through 7.0.0.28 Kaseya Virtual System Administrator (VSA) versions 8.x through 8.0.0.17 Kaseya Virtual System Administrator (VSA) versions 9.0 through 9.0.0.13 Kaseya Virtual System Administrator (VSA) versions 9.1 through 9.1.0.3

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks.

Recommendations For Kaseya Virtual System Administrator (VSA) versions 7.x through 7.0.0.28, update to version 7.0.0.29 or later. For Kaseya Virtual System Administrator (VSA) versions 8.x through 8.0.0.17, update to version 8.0.0.18 or later. For Kaseya Virtual System Administrator (VSA) versions 9.0 through 9.0.0.13, update to version 9.0.0.14 or later. For Kaseya Virtual System Administrator (VSA) versions 9.1 through 9.1.0.3, update to version 9.1.0.4 or later.

Exploit

Correção

Identificadores relacionados

CVE-2015-2863

Produtos afetados

Kaseya Virtual System Administrator

Referências · 3

• 🔥 https://exploit-db.com/exploits/37621 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2863 · Nota de Segurança
• http://kb.cert.org/vuls/id/919604 · Nota