CVE-2021-43034 | BDVDB-2026-165191 Detail

Description#

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A world writable file allowed local users to execute arbitrary code as the user apache, leading to privilege escalation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961
https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1
https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2

Exploit#

No public exploit known

History#

Version 12021-12-06Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.