CVE-2021-43036: Critical severity unitrends backup vulnerability
Published Dec 6, 2021
·Updated
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The password for the PostgreSQL wguest account is weak.
Affected Software
1 affected component
Kaseya Unitrends Backup>=10.0<10.5.5
Event History
Dec 6, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-43036?
CVE-2021-43036 is considered to have a moderate severity due to the use of a weak password for the PostgreSQL wguest account.
2
How do I fix CVE-2021-43036?
To fix CVE-2021-43036, change the password for the PostgreSQL wguest account to a strong and complex password.
3
Which versions of Kaseya Unitrends Backup are affected by CVE-2021-43036?
CVE-2021-43036 affects Kaseya Unitrends Backup versions before 10.5.5.
4
What consequences can result from CVE-2021-43036?
Due to the weak password, CVE-2021-43036 can allow unauthorized access to the PostgreSQL database, potentially compromising sensitive data.
5
Is there a patch available for CVE-2021-43036?
There is no specific patch for CVE-2021-43036, but updating to version 10.5.5 or later helps mitigate the vulnerability.