CVE-2018-6329 It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on....
CriticalCVSS 9.8
EPSS 61.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unitrends backup | < 10.1.10 | 10.1.10 |
References
- support.unitrends.com vendor-advisory
- support.unitrends.com vendor-advisory
- 44297 exploit third-party-advisory vdb-entry
- 45913 exploit third-party-advisory vdb-entry