CVE-2024-48248: high-severity vulnerability in NAKIVO Backup & Replication Director
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
NAKIVO Backup & Replication versions before 11.0.0.88174 allow attackers to read any file on the system by bypassing directory restrictions, potentially exposing sensitive credentials that could lead to unauthorized access across the entire organization.
The vulnerability exploits path traversal in the getImageByPath function accessible via /c/router endpoint, enabling unauthenticated file disclosure. PhysicalDiscovery component stores cleartext credentials, which when exposed can be leveraged for lateral movement and remote code execution across enterprise infrastructure.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.