PT-2017-17633

Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.1.1 Description An issue allows an authenticated attacker to read any file in the filesystem that the web server has access to. This is achieved through the "downloadFile" function in...

PT-2017-17634

Name of the Vulnerable Software and Affected Versions Unitrends Enterprise Backup versions prior to 9.1.2 Description The issue allows an authenticated user to execute arbitrary OS commands by sending a specially crafted filename to the "/api/restore/download-files" endpoint. This is related to t...