Loading
It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an existing low-privilege user to root privileges. A remote attacker with existing low-privilege credentials could then execute arbitrary commands with root privileges.
Use Kaseya vendor hub and Unitrends Backup product page to widen CVE-2017-12479 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2021-40386, CVE-2021-43044 and CVE-2021-43042 for nearby disclosures in the same product family.