Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-15720

Description

CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that executes on behalf of NT AUTHORITY\SYSTEM.

POC

Reference

- https://www.sevenlayers.com/index.php/243-cloudberry-backup-local-privilege-escalation

Github

No PoCs found on GitHub currently.