CVE-2018-6328 : Security Advisory and Response
Learn about CVE-2018-6328, an authentication bypass vulnerability in Unitrends Backup (UB) user interface before version 10.1.0, allowing unauthorized command injection.
An authentication bypass vulnerability was found in the Unitrends Backup (UB) user interface before version 10.1.0, allowing unauthorized users to inject arbitrary commands.
Understanding CVE-2018-6328
This CVE involves an authentication bypass issue in Unitrends Backup (UB) user interface, potentially leading to command injection by unauthorized users.
What is CVE-2018-6328?
CVE-2018-6328 is an authentication bypass vulnerability in Unitrends Backup (UB) user interface, enabling unauthorized users to inject arbitrary commands into the /api/hosts parameters using backquotes.
The Impact of CVE-2018-6328
The vulnerability could be exploited by unrestricted users to execute arbitrary commands, posing a significant security risk to affected systems.
Technical Details of CVE-2018-6328
This section provides detailed technical information about the CVE.
Vulnerability Description
An authentication bypass in Unitrends Backup (UB) user interface before version 10.1.0 allowed unauthorized users to inject arbitrary commands using backquotes in the /api/hosts parameters.
Affected Systems and Versions
- Product: Unitrends Backup (UB)
- Vendor: Unitrends
- Versions affected: Before 10.1.0
Exploitation Mechanism
Unauthorized users could exploit this vulnerability by injecting arbitrary commands into the /api/hosts parameters using backquotes.
Mitigation and Prevention
Protect your systems from CVE-2018-6328 with the following steps:
Immediate Steps to Take
- Upgrade Unitrends Backup to version 10.1.0 or later to mitigate the vulnerability.
- Implement strict access controls to prevent unauthorized access to the /api/hosts parameters.
Long-Term Security Practices
- Regularly monitor and audit user activities within the Unitrends Backup interface.
- Conduct security training for users to raise awareness about the risks of command injection vulnerabilities.
Patching and Updates
- Stay informed about security updates and patches released by Unitrends to address vulnerabilities like CVE-2018-6328.