CVE-2022-37027: High severity ahsay cloud backup suite vulnerability
Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject Java Runtime Options. These take effect after a restart. For example, an attacker can enable JMX services and consequently achieve remote code execution as the system user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-37027?
CVE-2022-37027 is considered a high severity vulnerability, as it allows authenticated users to inject arbitrary Java JVM options.
How do I fix CVE-2022-37027?
To fix CVE-2022-37027, update Ahsay Cloud Backup Suite to the latest version that addresses this vulnerability.
Who is affected by CVE-2022-37027?
CVE-2022-37027 affects users of Ahsay Cloud Backup Suite version 9.1.4.0 who have administrative access.
What are the risks associated with CVE-2022-37027?
The risks include potential unauthorized access to system data and control over Java processes, enabling further exploitation.
Can CVE-2022-37027 be exploited remotely?
CVE-2022-37027 requires authenticated access, so exploitation hinges on compromise of user credentials.