An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow by abusing an insecure Sudo rule.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unitrends_backup | Kaseya | 10.0 (including) | 10.5.5 (excluding) |