virtual_system_administrator 漏洞

严重CVE-2015-69222020/02/17

CVE-2015-6922

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted request to LocalAuth/setAccount.aspx or (2) write to and execute arbitrary files via a full pathname in the PathData parameter to ConfigTab/uploader.aspx.

virtual_system_administratorRCE

CVSS9.8EPSS 76.7%

中危CVE-2015-28632015/07/20

Kaseya Virtual System Administrator - Open Redirect

Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

virtual_system_administratorPoC 已收录

CVSS4.3EPSS 49.7%

virtual_system_administrator

关联漏洞

CVE-2015-6922

Kaseya Virtual System Administrator - Open Redirect