CVE-2021-43038: High severity unitrends backup vulnerability
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account could execute commands by injecting into PostgreSQL trigger functions. This allowed privilege escalation from the wguest user to the postgres user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-43038?
CVE-2021-43038 is considered a critical vulnerability due to its capability to allow privilege escalation.
How do I fix CVE-2021-43038?
To fix CVE-2021-43038, you should upgrade Kaseya Unitrends Backup Appliance to version 10.5.5 or later.
What impact does CVE-2021-43038 have on system security?
CVE-2021-43038 allows an unauthorized user to execute commands with elevated privileges, compromising system integrity.
Which versions of Kaseya Unitrends Backup are affected by CVE-2021-43038?
CVE-2021-43038 affects Kaseya Unitrends Backup Appliance versions from 10.0 to 10.5.4.
What is the attack vector for CVE-2021-43038?
The attack vector for CVE-2021-43038 involves injecting commands into PostgreSQL trigger functions via the wguest account.