Path Traversal in Kaseya Virtual_system_administrator

CVE-2015-2862

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HT…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.095 (94.9th percentile) — read the EPSS interpretation.

Affected products

Kaseya Virtual_system_administrator
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)