CVE Catalog

CVE-2017-7279

Critical
Published: Translated: NVD NIST

Summary

An unprivileged user of the Unitrends Enterprise Backup before version 9.0.0 can escalate to root privileges by modifying the 'token' cookie issued at login.

Risk Assessment

An attacker could gain full access to the system, posing a serious threat to the security of the organization's data and infrastructure.

Recommendation

It is recommended to upgrade to version 9.0.0 or later to mitigate this vulnerability.

Original NVD description (English source)

An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS