CVE-2018-11143

Summary of available details: Quest DR Series Disk Backup Software prior to version 4.0.3.1 contains multiple command-injection vulnerabilities exposed via its web/JSON-RPC API. The most critical issue, CVE-2018-11143, allows unauthenticated remote command execution through the Logon endpoint, wi...