PT-2015-5945 · Kaseya · Kaseya Vsa

Pedro Ribeiro · Published 2015-07-20 · Updated 2019-02-05 · CVE-2015-2862

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaseya Virtual System Administrator (VSA) versions 7.x before 7.0.0.29 Kaseya Virtual System Administrator (VSA) versions 8.x before 8.0.0.18 Kaseya Virtual System Administrator (VSA) versions 9.0 before 9.0.0.14 Kaseya Virtual System Administrator (VSA) versions 9.1 before 9.1.0.4

Description A directory traversal issue allows remote authenticated users to read arbitrary files via a crafted HTTP request.

Recommendations For Kaseya Virtual System Administrator (VSA) versions 7.x before 7.0.0.29, update to version 7.0.0.29 or later. For Kaseya Virtual System Administrator (VSA) versions 8.x before 8.0.0.18, update to version 8.0.0.18 or later. For Kaseya Virtual System Administrator (VSA) versions 9.0 before 9.0.0.14, update to version 9.0.0.14 or later. For Kaseya Virtual System Administrator (VSA) versions 9.1 before 9.1.0.4, update to version 9.1.0.4 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-2862

Affected Products

Kaseya Vsa

References · 3

• 🔥 https://exploit-db.com/exploits/37621 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2862 · Security Note
• http://kb.cert.org/vuls/id/919604 · Note