Skip to content

CVE-2015-2862 Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users t...

MediumCVSS 4.0 EPSS 9.4% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.

Affected products

ProductAffected versionsFixed in
kaseya virtual system administrator >= 7.0, < 7.0.0.29 7.0.0.29
kaseya virtual system administrator >= 8.0, < 8.0.0.18 8.0.0.18
kaseya virtual system administrator >= 9.0, < 9.0.0.14 9.0.0.14
kaseya virtual system administrator >= 9.1, < 9.1.0.4 9.1.0.4

References

  • VU#919604 third-party-advisory us-government-resource