PT-2021-23732 · Apache+1 · Apache Http Server+1

Rich Mirch · Published 2021-12-06 · Updated 2022-11-28 · CVE-2021-43043

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaseya Unitrends Backup Appliance versions prior to 10.5.5

Description An issue was discovered in the software where the apache user could read arbitrary files, such as /etc/shadow, by abusing an insecure Sudo rule.

Recommendations For versions prior to 10.5.5, update to version 10.5.5 or later to resolve the issue. As a temporary workaround, consider restricting the privileges of the apache user to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2021-43043

Affected Products

Apache Http Server

Kaseya Unitrends Backup Appliance

References · 9

• 🔥 https://cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1 · Exploit
• 🔥 https://cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2 · Exploit
• https://osv.dev/vulnerability/CVE-2021-43043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43043 · Security Note
• https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961 · Vendor Advisory
• https://t.me/cvenotify/24276 · Telegram Post
• https://t.me/cibsecurity/33357 · Telegram Post
• https://t.me/cvenotify/38294 · Telegram Post
• https://t.me/cvenotify/24247 · Telegram Post