CVE-2021-43043

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow by abusing an insecure Sudo rule...

CVE-2021-43043

CVE-2021-43043 affects Kaseya Unitrends Backup Appliance (pre-10.5.5). The issue is an insecure sudo rule that allows the apache user to read arbitrary files (for example /etc/shadow), leading to a local file disclosure vulnerability. Root cause: misconfigured sudo privileges enabling read access...