Unitrends: >> Backup >> 10.0 Security Vulnerabilities
In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass.
CVSS Score
9.8
EPSS Score
0.004
Published
2020-02-17
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.
CVSS Score
9.8
EPSS Score
0.795
Published
2018-03-14