Lucene search
PRIOn knowledge basePRION:CVE-2017-7282HistoryApr 20, 2017 - 2:59 a.m.
Design/Logic Flaw
2017-04-2002:59:00
PRIOn knowledge base
www.prio-n.com
3
An issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in api/includes/restore.php blindly accepts any filename passed to /api/restore/download as valid. This allows an authenticated attacker to read any file in the filesystem that the web server has access to, aka Local File Inclusion (LFI).
| CPE | Name | Operator | Version |
|---|---|---|---|
| enterprise_backup | le | 9.1 |
Related
cvelist
cvelist
CVE-2017-7282
2017-04-20 02:43:00
cve
cve
CVE-2017-7282
2017-04-20 02:59:00
nvd
nvd
CVE-2017-7282
2017-04-20 02:59:00
openvas
openvas
Unitrends < 9.1.2 Multiple Vulnerabilities
2017-04-12 00:00:00