critical9.8
CVE-2022-43999
An issue was discovered in BACKCLICK Professional 5.9.63.
Impact
An issue was discovered in BACKCLICK Professional 5.9.63. Due to exposed CORBA management services, arbitrary system commands can be executed on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Backclick | Backclick | Version 5.9.63 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-034.txt
- https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-034.txt
- https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037