Viktor Schlueter

The issue allows for unauthenticated path traversal, enabling an attacker to download the application database. This can potentially be combined with other exploits for further access.

The issue allows for authenticated remote code execution through the backup functionality of the web frontend.

The issue allows remote code execution via the backup functionality in the web frontend. An attacker with network access can exploit this to gain root access on the gateway.

The issue allows local privilege escalation via a race condition in logrotate. An attacker with access to the network can exploit this to gain root access on the gateway.

The issue allows an attacker with network access to gain root access on the gateway by exploiting a passwordless ftp ssh user through an exploit chain.