CVE-2017-7281: Malicious File Upload
An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension, contents, and path, leading to remote code execution, aka Unrestricted File Upload.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Unitrends Enterprise Backupto a version that resolves this vulnerability.Fixed in 9.1.2
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7281?
CVE-2017-7281 is classified as a medium severity vulnerability due to the potential for authenticated users to execute arbitrary code.
How do I fix CVE-2017-7281?
To fix CVE-2017-7281, upgrade Unitrends Enterprise Backup to version 9.1.2 or later, where the vulnerability is addressed.
Who is affected by CVE-2017-7281?
CVE-2017-7281 affects users of Unitrends Enterprise Backup versions prior to 9.1.2.
What type of attack is possible with CVE-2017-7281?
CVE-2017-7281 allows an authenticated user to create arbitrary files on the server, which can lead to information disclosure or code execution.
What functions are involved in CVE-2017-7281?
The functions involved in CVE-2017-7281 are createReportName and saveReport in the reports.php file.