PT-2015-7406 · Kaseya · Kaseya Virtual System Administrator

Pedro Ribeiro

·

Published

2015-09-23

·

Updated

2020-02-26

·

CVE-2015-6922

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Kaseya Virtual System Administrator (VSA) versions 7.x through 7.0.0.32 Kaseya Virtual System Administrator (VSA) versions 8.x through 8.0.0.22 Kaseya Virtual System Administrator (VSA) versions 9.0 through 9.0.0.18 Kaseya Virtual System Administrator (VSA) versions 9.1 through 9.1.0.8
Description The issue allows remote attackers to bypass authentication. This can be achieved by sending a crafted request to "LocalAuth/setAccount.aspx" to add an administrative account, or by writing to and executing arbitrary files via a full pathname in the PathData parameter to "ConfigTab/uploader.aspx".
Recommendations For versions 7.x through 7.0.0.32, update to version 7.0.0.33 or later. For versions 8.x through 8.0.0.22, update to version 8.0.0.23 or later. For versions 9.0 through 9.0.0.18, update to version 9.0.0.19 or later. For versions 9.1 through 9.1.0.8, update to version 9.1.0.9 or later.

Exploit

Fix

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2015-6922
ZDI-15-448
ZDI-15-449

Affected Products

Kaseya Virtual System Administrator