Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15864)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the updateRegisterDR2000v method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability

The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to elevate privileges from web server user to root via ocashell...