CVE-2024-22901

Name of the Vulnerable Software and Affected Versions Vinchin Backup & Recovery version 7.2

Description The issue is related to the use of default credentials in Vinchin Backup & Recovery. This could allow a remote attacker to elevate their privileges.

Recommendations For Vinchin Backup & Recovery version 7.2, change the default MYSQL credentials to custom, secure credentials as soon as possible to prevent exploitation. Consider restricting access to the MYSQL database until the credentials are changed.