CVE-2015-9256

2022-10-0316:16:02

mitre

www.cve.org

datto alto

siris

sensitive information

access control

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.3%

JSON

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.

References

www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html