CVE-2018-6329: SQL Injection
Published Mar 14, 2018
·Updated
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.
Affected Software
1 affected component
Unitrends Backup<10.1.10
Event History
Mar 14, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6329?
CVE-2018-6329 has a medium severity rating due to its potential for remote exploitation via SQL injection.
2
How do I fix CVE-2018-6329?
To fix CVE-2018-6329, upgrade Unitrends Backup to version 10.1.10 or later.
3
What types of attacks can be executed due to CVE-2018-6329?
CVE-2018-6329 allows for privilege escalation and execution of arbitrary commands on the affected system.
4
Which version of Unitrends Backup is affected by CVE-2018-6329?
CVE-2018-6329 affects all versions of Unitrends Backup prior to 10.1.10.
5
Who can exploit CVE-2018-6329?
CVE-2018-6329 can be exploited by remote attackers who have access to the vulnerable Unitrends Backup system.