CVE-2017-15367: Bacula-web SQL Injection Vulnerabilities
Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.
Other sources
Bacula-web SQL Injection Vulnerabilities
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/bacula-web/bacula-webto a version that resolves this vulnerability.Fixed in 8.0.0-rc2 - Upgrade
Upgrade
Bacula-webto a version that resolves this vulnerability.Fixed in 8.0.0-rc2
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15367?
CVE-2017-15367 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2017-15367?
To fix CVE-2017-15367, upgrade to Bacula-web version 8.0.0-rc2 or later.
What are the potential impacts of CVE-2017-15367?
CVE-2017-15367 can lead to unauthorized access to the Bacula database and privilege escalation depending on the server configuration.
Which versions are affected by CVE-2017-15367?
CVE-2017-15367 affects Bacula-web versions prior to 8.0.0-rc2 and includes versions up to 7.4.0.
What type of vulnerability is CVE-2017-15367?
CVE-2017-15367 is a SQL Injection vulnerability that allows attackers to manipulate database queries.