CVE-2019-15506: Missing Authentication for Critical Function

An issue was discovered in Kaseya Virtual System Administrator VSA through 9.4.0.37. It has a critical information disclosure vulnerability. An unauthenticated attacker can send properly formatted requests to the web application and download sensitive files and information. For example, the...

PT-2019-14231

Name of the Vulnerable Software and Affected Versions Kaseya Virtual System Administrator VSA versions through 9.4.0.37 Description The issue concerns a critical information disclosure problem. An unauthenticated attacker can send properly formatted requests to the web application and download...