PT-2019-14342
CVE-2019-15720
·
تاريخ النشر
2019-08-28
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CloudBerry Backup version 6.1.2.34
Description
The issue allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that executes on behalf of NT AUTHORITYSYSTEM.
Recommendations
For CloudBerry Backup version 6.1.2.34, as a temporary workaround, consider disabling the execution of Pre and Post backup action scripts until a patch is available. Restrict access to modify backup plans to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾