PT-2024-27762 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is related to a command injection vulnerability in the operating system, specifically due to improper neutralisation of special elements in Active Directory integration. This allows the...

CVE-2024-3781: Improper Neutralization of Special Elements used in an OS Command

Command injection vulnerability in the operating system. Improper neutralisation of special elements in Active Directory integration allows the intended command to be modified when sent to a downstream component in WBSAirback 21.02.04...

PT-2024-27798 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue involves improper neutralisation of Server-Side Includes SSI through S3 disks, specifically at the /admin/DeviceS3 endpoint. This could allow a remote user to execute arbitrary code,...

PT-2024-27817 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability. It occurs through the /admin/SystemUsers endpoint, specifically in the login and description fields, and the passwd1 and passwd2 parameters...

PT-2024-27844 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability that occurs through the /admin/AdvancedSystem endpoint, specifically in the description field, and affects all parameters. This could allow ...

PT-2024-27835 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability. It occurs through the "/admin/CloudAccounts" API endpoint, specifically in the account name, user password, and server fields, affecting al...

PT-2024-27772

Name of the Vulnerable Software and Affected Versions WBSAirback version 21.02.04 Description The issue allows a user with low privileges to download files from the system due to a Path Traversal vulnerability in the Backup Agents section. Recommendations For WBSAirback version 21.02.04, consider...

PT-2024-27765 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is related to a Cross-Site Request Forgery vulnerability, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged use...

CVE-2024-3786: Improper Control of Generation of Code

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes SSI, through Device Synchronizations /admin/DeviceReplication. Exploitation of this vulnerability could allow a remote user to execute arbitrary code...

WBSAirback 路径遍历漏洞

WBSAirback is a next generation storage and backup system from WBSAirback. A path traversal vulnerability exists in WBSAirback version 21.02.04, which can be exploited by a low-privileged attacker to download files from the system...

PT-2024-27822 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability. It occurs through the /admin/SystemConfiguration endpoint, specifically in the name and free memory limit fields, and the type and password...