Design/Logic Flaw

2020-09-2421:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories.

CPENameOperatorVersion
backup_\\&_replication_transportereq9.4.0-r43656

CPE	Name	Operator	Version
	backup_\\&_replication_transporter	eq	9.4.0-r43656

References

helpcenter.nakivo.com/display/RN/v10.3+Release+Notes

labs.f-secure.com/advisories/nakivo-backup-and-replication-multiple-vulnerabilities