Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bacula Console ACL Access 安全绕过漏洞
Vulnerability Description
bacula是一个备份工具,可以在网络上各种不同系统之间,实现文件的备份、恢复和验证等等功能。它是基于传统的客户/服务器模式的网络备份程序,被誉为开源平台下最优秀的网络备份工具之一。功能强大的它,完全可以和商用备份软件相媲美。 Bacula早期版本至5.2.11版本中的dird/dird_conf.c中的dump_resource函数中存在安全绕过漏洞。攻击者可利用该漏洞绕过某些安全限制并执行未授权操作,有助于发起进一步攻击。
CVSS Information
N/A
Vulnerability Type
N/A