← Back

Backup & Replication Director

backup_&_replication_director

Vendor: Nakivo • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-48248
1Nakivo
1Backup & Replication Director
Nov 5, 2025
Mar 4, 2025
N/A· v4
8.6 HIGH· v3
N/A· v2
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has...Show more
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).Show less
CVE-2020-15850
1Nakivo
1Backup & Replication Director
Nov 21, 2024
Sep 24, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containi...Show more
Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containing the users of the web application and the password-recovery secret value is readable.Show less