Nakivo

nakivo

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Backup & Replication Director

backup_&_replication_director

Backup & Replication Transporter

backup_&_replication_transporter

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-48248 1Nakivo 1Backup & Replication Director Nov 5, 2025 Mar 4, 2025 N/A· v4 8.6 HIGH· v3 N/A· v2 NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has...Show more NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).Show less
CVE-2020-15851 1Nakivo 1Backup & Replication Transporter Nov 21, 2024 Sep 24, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transp...Show more Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories.Show less
CVE-2020-15850 1Nakivo 1Backup & Replication Director Nov 21, 2024 Sep 24, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containi...Show more Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containing the users of the web application and the password-recovery secret value is readable.Show less