high7.8
CVE-2019-15720
CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action.
Impact
CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that executes on behalf of NT AUTHORITY\SYSTEM.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudberrylab | Backup | through 6.1.2.34 |