Critical · published July 9, 2021
CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 99.7th percentile for exploit probability.
🚨 Kaseya VSA's download page is leaking your credentials, making it a goldmine for attackers! 🔥 Think of this like a hotel that hands out room keys without verifying identities - anyone could stroll in and grab your belongings. In this case, an attacker can download an installer that reveals sensitive information, unlocking access to your system without a second thought. An attacker can exploit this vulnerability to gain unauthorized access, snagging session cookies that provide a backdoor into your Kaseya installation. This could lead to a complete compromise of critical systems, exposing sensitive data and allowing attackers to execute semi-authenticated actions against your network. It's utterly devastating!
Think of this like a hotel that hands out room keys without verifying identities - anyone could stroll in and grab your belongings. In this case, an attacker can download an installer that reveals sensitive information, unlocking access to your system without a second thought. The flaw arises from an unauthenticated download page that allows attackers to download a client file containing Agent_Guid and AgentPassword, which can be used to authenticate and obtain a sessionId cookie for further attacks.
An attacker can exploit this vulnerability to gain unauthorized access, snagging session cookies that provide a backdoor into your Kaseya installation. This could lead to a complete compromise of critical systems, exposing sensitive data and allowing attackers to execute semi-authenticated actions against your network. It's utterly devastating! To secure your systems, immediately update Kaseya VSA to version 9.5.7 or later. Additionally, consider disabling or restricting access to the download page until the update can be applied. Regularly audit your configurations to ensure sensitive information is not exposed. You’ve got this! With these steps, you can lock down your environment and thwart potential attacks! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| kaseya/vsa_agent | < 9.5.0.24 | 9.5.0.24 |
| kaseya/vsa_server | < 9.5.7a | 9.5.7a |