Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated SQL injection vulnerabilities were discovered, allowing arbitrary SQL queries to be injected and executed under the postgres superuser account. Remote code execution was possible, leading to full access to the postgres user account.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Unitrends Backup SQL注入漏洞
Vulnerability Description
Unitrends Backup是消除数据丢失、 勒索软件和风险。 Unitrends Backup存在SQL注入漏洞，该漏洞源于在10.5.5之前在Kaseya Unitrends备份设备中发现了一个问题。世界可写文件允许本地用户以apache用户的身份执行任意代码，从而导致权限升级。
CVSS Information
N/A
Vulnerability Type
N/A