medium4.0Public exploit code
CVE-2015-2862
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (1)2015-07-15 · webapps · windows
Impact
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kaseya | Virtual System Administrator | from 7.0 before 7.0.0.29 from 8.0 before 8.0.0.18 from 9.0 before 9.0.0.14 from 9.1 before 9.1.0.4 |