CVE-2015-6589
Summary
| CVE | CVE-2015-6589 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-02-13 21:15:00 UTC |
| Updated | 2020-02-25 18:32:00 UTC |
| Description | Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote authenticated users to write to and execute arbitrary files due to insufficient restrictions in file paths to json.ashx. |
Risk And Classification
Problem Types: CWE-22
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kaseya | Virtual System Administrator | All | All | All | All |
| Application | Kaseya | Virtual System Administrator | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Kaseya Virtual System Administrator CVE-2015-6589 Arbitrary File Upload Vulnerability | MISC | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Kaseya Virtual System Administrator Code Execution / Privilege Escalation ≈ Packet Storm | MISC | packetstormsecurity.com | Exploit, Third Party Advisory, VDB Entry |
| Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (2) - ASP webapps Exploit | MISC | www.exploit-db.com | Exploit, Third Party Advisory, VDB Entry |
| Zero Day Initiative | MISC | www.zerodayinitiative.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.