CVE-2024-0800

HIGH

Authentication Bypass via wizardLogin in Arcserve Unified Data Protection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-0800 has a selected CVSS score of 8.8 (high).

Description

A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · May 9, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 30, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Unified Data Protection

Browse Arcserve / Unified Data Protection

Default status: unaffected

VulnCheck, CVE ListThrough 9.2affected
Through 8.1affected

arcserve_unified_data_protection

Browse arcserve / arcserve_unified_data_protection

Default status: unknown

CVE List9.2affected

References

2