medium4.3Public exploit code
CVE-2015-2863
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (1)2015-07-15 · webapps · windows
Impact
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kaseya | Virtual System Administrator | from 7.0 before 7.0.0.29 from 8.0 before 8.0.0.18 from 9.0 before 9.0.0.14 from 9.1 before 9.1.0.4 |