Jared Arave

The issue allows an unauthenticated user to bypass authentication and inject arbitrary commands into the `parameters` using backquotes in the "/api/hosts" API endpoint.

A security issue was found where the authentication in libbpext.so could be bypassed using a SQL injection, allowing a remote attacker to potentially place a privilege escalation exploit on the system and execute arbitrary commands.

The issue is related to the `api/storage` web interface, where an input parameter was not validated, allowing a remote attacker to bypass authentication and execute arbitrary commands with root privilege on the target system. This flaw is associated with deficiencies in the authentication procedure, which can be exploited by a remote attacker to bypass authentication or execute arbitrary commands with root privileges.

The issue is related to the bpserverd proprietary protocol in Unitrends Backup, which can be invoked through xinetd. It has been discovered that the authentication in this protocol can be bypassed. A remote attacker could exploit this issue to execute arbitrary commands with root privilege on the target system. The vulnerability is associated with weaknesses in the authentication procedure, allowing a remote attacker to bypass authentication or execute commands with root privileges.