CVE-2017-18362

CRITICAL · 9.5 CVSS Gepubliceerd: 24-05-2022 CWE-89

Beschrijving

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

Required action: The impacted product is end-of-life and should be disconnected if still in use.

Vendors

Kaseya

Affected products

Virtual System/server Administrator (vsa)

References

nvd.nist.gov