Loading vulnerability details…
CVSS v3.1
N/A
EPSS
64.93%
Published
Mar 14, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (3)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allow an unauthenticated user to inject arbitrary commands into its /api/hosts parameters using backquotes.
Weaknesses (CWE)
Affected Products (1)
References (8)