← back
CVE-2018-6329

CVE-2018-6329

EPSS 62.5%
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.
Affected products
n/a · n/a
public PoCs found — 4
cve_referencewww.exploit-db.com/exploits/44297/unverifiedcve_referencewww.exploit-db.com/exploits/45913/unverifiedexploitdbwww.exploit-db.com/exploits/45913unverifiedexploitdbwww.exploit-db.com/exploits/44297unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://support.unitrends.com/UnitrendsBackup/s/article/000001150https://support.unitrends.com/UnitrendsBackup/s/article/000006003https://www.exploit-db.com/exploits/44297/https://www.exploit-db.com/exploits/45913/