CVE-2021-43035

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated SQL injection vulnerabilities were discovered, allowing arbitrary SQL queries to be injected and executed under the postgres superuser account. Remote code execution was possible, leading to full acces...

CVE-2021-43035

CVE-2021-43035 affects Kaseya Unitrends Backup Appliance prior to version 10.5.5. Two unauthenticated SQL injection flaws allow arbitrary SQL to be injected and executed with the postgres superuser, enabling remote code execution and full access to the postgres account. Remediation per connected ...