Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15879)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the getstoragegroupstatistics method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute system commands via the...