NetSight
critical9.8

CVE-2017-7279

An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.

Impact

An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.

Affected products

VendorProductAffected versions
UnitrendsEnterprise Backup
through 8.2.0-8

Weakness classification

References