CVE-2017-7284 : Exploit Details and Defense Strategies

Unitrends Enterprise Backup web server session vulnerability allows unauthorized account access.

Understanding CVE-2017-7284

A security flaw in Unitrends Enterprise Backup (pre-9.1.2) enables attackers to change account passwords without current password knowledge.

What is CVE-2017-7284?

Attackers exploiting the api/includes/users.php file can modify passwords of logged-in accounts without authentication.
Vulnerability affects Unitrends Enterprise Backup versions before 9.1.2.

The Impact of CVE-2017-7284

Unauthorized individuals can gain access to user accounts without proper authentication.

Technical Details of CVE-2017-7284

Vulnerability Description

Attackers can hijack web server sessions to change account passwords.

Affected Systems and Versions

Unitrends Enterprise Backup versions prior to 9.1.2 are vulnerable.

Exploitation Mechanism

Leveraging the api/includes/users.php file, attackers can modify passwords without the current password.

Mitigation and Prevention

Immediate Steps to Take

Upgrade Unitrends Enterprise Backup to version 9.1.2 or later.
Monitor account activities for unauthorized changes.

Long-Term Security Practices

Implement strong password policies.
Regularly audit and review user account access.

Patching and Updates

Apply security patches and updates promptly to mitigate the vulnerability.