PT-2017-17633 · Unitrends · Unitrends Enterprise Backup

Publicado 2017-04-20 · Atualizado 2017-04-25 · CVE-2017-7282

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.1.1

Description An issue allows an authenticated attacker to read any file in the filesystem that the web server has access to. This is achieved through the "downloadFile" function in "api/includes/restore.php" which blindly accepts any filename passed to the "/api/restore/download" API endpoint as valid.

Recommendations For versions prior to 9.1.1, update to version 9.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/api/restore/download" API endpoint to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7282

Produtos afetados

Unitrends Enterprise Backup

Referências · 4

• 🔥 https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2 · Exploit
• https://osv.dev/vulnerability/CVE-2017-7282 · Aviso do Fabricante
• https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcWGAA0/000005558?r=1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7282 · Nota de Segurança