CVE-2018-6328: Critical severity Kaseya Unitrends Backup vulnerability
Published Mar 14, 2018
·Updated
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.
Affected Software
1 affected component
Kaseya Unitrends Backup<10.1
Event History
Mar 14, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6328?
CVE-2018-6328 is classified as a medium severity vulnerability due to the potential for unauthorized command injection.
2
How do I fix CVE-2018-6328?
To fix CVE-2018-6328, upgrade to Unitrends Backup version 10.1.0 or later.
3
What kind of attack can exploit CVE-2018-6328?
CVE-2018-6328 can be exploited by an unauthenticated user to perform command injection attacks through the user interface.
4
Which versions of Unitrends Backup are affected by CVE-2018-6328?
Versions of Unitrends Backup prior to 10.1.0 are affected by CVE-2018-6328.
5
What are the impacts of CVE-2018-6328?
The impact of CVE-2018-6328 includes unauthorized access and potential system compromise through command injection.