CVE-2020-15851

Name of the Vulnerable Software and Affected Versions Nakivo Backup & Replication Transporter version 9.4.0.r43656

Description The issue is related to a lack of access control, allowing remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network-accessible transporter service. It also enables the creation or deletion of backup repositories.

Recommendations For Nakivo Backup & Replication Transporter version 9.4.0.r43656, consider restricting access to the transporter service to minimize the risk of unauthorized access to backup repositories and the Nakivo Controller configuration. As a temporary workaround, limit the ability to create or delete backup repositories until a fix is available.