VDB
BDU%3A2025-02355
BDU%3A2025-02355
PUBLISHED
CVSS 8.600000381469727 HIGH
Уязвимость веб-интерфейса системы резервного копирования, репликации и восстановления виртуальных машин NAKIVO Backup and Replication, позволяющая нарушителю раскрыть защищаемую информацию
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nakivo | backup_\&_replication_director | 0 |
| NAKIVO | Backup & Replication Director | 0 |
| NAKIVO Inc. | NAKIVO Backup & Replication |
Timeline
- Feb 26, 2025 PoC Published
- Feb 26, 2025 PoC Published
- Feb 26, 2025 PoC Published
- Feb 26, 2025 PoC Published
- Feb 26, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 27, 2025 PoC Published
- Feb 28, 2025 PoC Published
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-48248 url
- https://www.nakivo.com/upgrade-to-new-version/ advisory
- https://github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248/?ref=labs.watchtowr.com url
- https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm url
- https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/ url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url