CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-43038

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account could execute commands by injecting into PostgreSQL trigger functions. This allowed privilege escalation from the wguest user to the postgres user.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 78.0%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2021-43038

Kaseya » Unitrends Backup » Version: 10.0

cpe:2.3:a:kaseya:unitrends_backup:10.0
Kaseya » Unitrends Backup » Version: 10.1

cpe:2.3:a:kaseya:unitrends_backup:10.1
Kaseya » Unitrends Backup » Version: 10.1.1

cpe:2.3:a:kaseya:unitrends_backup:10.1.1
Kaseya » Unitrends Backup » Version: 10.2

cpe:2.3:a:kaseya:unitrends_backup:10.2
Kaseya » Unitrends Backup » Version: 10.2.1

cpe:2.3:a:kaseya:unitrends_backup:10.2.1
Kaseya » Unitrends Backup » Version: 10.3.1

cpe:2.3:a:kaseya:unitrends_backup:10.3.1
Kaseya » Unitrends Backup » Version: 10.3.10

cpe:2.3:a:kaseya:unitrends_backup:10.3.10
Kaseya » Unitrends Backup » Version: 10.3.11

cpe:2.3:a:kaseya:unitrends_backup:10.3.11
Kaseya » Unitrends Backup » Version: 10.3.2

cpe:2.3:a:kaseya:unitrends_backup:10.3.2
Kaseya » Unitrends Backup » Version: 10.3.3

cpe:2.3:a:kaseya:unitrends_backup:10.3.3
Kaseya » Unitrends Backup » Version: 10.3.4

cpe:2.3:a:kaseya:unitrends_backup:10.3.4
Kaseya » Unitrends Backup » Version: 10.3.5

cpe:2.3:a:kaseya:unitrends_backup:10.3.5
Kaseya » Unitrends Backup » Version: 10.3.6

cpe:2.3:a:kaseya:unitrends_backup:10.3.6
Kaseya » Unitrends Backup » Version: 10.3.7

cpe:2.3:a:kaseya:unitrends_backup:10.3.7
Kaseya » Unitrends Backup » Version: 10.3.8

cpe:2.3:a:kaseya:unitrends_backup:10.3.8
Kaseya » Unitrends Backup » Version: 10.3.9

cpe:2.3:a:kaseya:unitrends_backup:10.3.9
Kaseya » Unitrends Backup » Version: 10.4.0

cpe:2.3:a:kaseya:unitrends_backup:10.4.0
Kaseya » Unitrends Backup » Version: 10.4.1

cpe:2.3:a:kaseya:unitrends_backup:10.4.1
Kaseya » Unitrends Backup » Version: 10.4.10

cpe:2.3:a:kaseya:unitrends_backup:10.4.10
Kaseya » Unitrends Backup » Version: 10.4.11

cpe:2.3:a:kaseya:unitrends_backup:10.4.11
Kaseya » Unitrends Backup » Version: 10.4.2

cpe:2.3:a:kaseya:unitrends_backup:10.4.2
Kaseya » Unitrends Backup » Version: 10.4.3

cpe:2.3:a:kaseya:unitrends_backup:10.4.3
Kaseya » Unitrends Backup » Version: 10.4.4

cpe:2.3:a:kaseya:unitrends_backup:10.4.4
Kaseya » Unitrends Backup » Version: 10.4.5

cpe:2.3:a:kaseya:unitrends_backup:10.4.5
Kaseya » Unitrends Backup » Version: 10.4.6

cpe:2.3:a:kaseya:unitrends_backup:10.4.6
Kaseya » Unitrends Backup » Version: 10.4.7

cpe:2.3:a:kaseya:unitrends_backup:10.4.7
Kaseya » Unitrends Backup » Version: 10.4.8

cpe:2.3:a:kaseya:unitrends_backup:10.4.8
Kaseya » Unitrends Backup » Version: 10.4.9

cpe:2.3:a:kaseya:unitrends_backup:10.4.9
Kaseya » Unitrends Backup » Version: 10.5.0

cpe:2.3:a:kaseya:unitrends_backup:10.5.0
Kaseya » Unitrends Backup » Version: 10.5.1

cpe:2.3:a:kaseya:unitrends_backup:10.5.1
Kaseya » Unitrends Backup » Version: 10.5.2

cpe:2.3:a:kaseya:unitrends_backup:10.5.2
Kaseya » Unitrends Backup » Version: 10.5.3

cpe:2.3:a:kaseya:unitrends_backup:10.5.3
Kaseya » Unitrends Backup » Version: 10.5.4

cpe:2.3:a:kaseya:unitrends_backup:10.5.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-43038

Products

Pricing

Contact Us