Vendor coverage
Track published CVEs, severity trends, and remediation context for nakivo products.
Search results
Showing 1-3 of 3 vulnerabilities.
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).
Affected vendor
nakivoAffected product
backup \& replication directorCoverage
Single affected product entry
CVSS
8.6
HIGH
Published
Mar 4, 2025
Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories.
Affected vendor
nakivoAffected product
backup \& replication transporterCoverage
Single affected product entry
CVSS
9.8
CRITICAL
Published
Sep 24, 2020
Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containing the users of the web application and the password-recovery secret value is readable.
Affected vendor
nakivoAffected product
backup \& replication directorCoverage
Single affected product entry
CVSS
7.8
HIGH
Published
Sep 24, 2020
