CVE-2015-4069 | BDVDB-2026-69643 Detail

Description#

The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the (1) getBackupPolicy or (2) getBackupPolicies method.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/74838
http://documentation.arcserve.com/Arcserve-UDP/Available/V5/ENU/Bookshelf_Files/HTML/Update%204/UDP_Update4_ReleaseNotes.html
http://www.zerodayinitiative.com/advisories/ZDI-15-243/
http://www.zerodayinitiative.com/advisories/ZDI-15-244/

Exploit#

No public exploit known

History#

Version 12015-05-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.