CVE-2021-43036

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5

published December 6, 2021

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

🚨 A weak password for the PostgreSQL wguest account in Kaseya Unitrends Backup Appliance might make your data feel like it’s wearing a sign that says, ‘Come on in!’ 🔥 Think of this like leaving your front door unlocked with a flimsy lock—anyone could stroll right in and access your valuables without breaking a sweat. A strong password is your security system, ensuring that only trusted individuals can enter. If an attacker were to exploit this weakness, they could gain unauthorized access to your backup data, potentially leading to data breaches, loss of sensitive information, or even data manipulation. This isn't a situation you want to find yourself in!

Put simply

Think of this like leaving your front door unlocked with a flimsy lock—anyone could stroll right in and access your valuables without breaking a sweat. A strong password is your security system, ensuring that only trusted individuals can enter. This vulnerability arises from the use of a weak password for the PostgreSQL wguest account, which could allow attackers to easily authenticate and access the database without significant effort.

What to do

If an attacker were to exploit this weakness, they could gain unauthorized access to your backup data, potentially leading to data breaches, loss of sensitive information, or even data manipulation. This isn't a situation you want to find yourself in! To mitigate this risk, change the password for the PostgreSQL wguest account to a strong, complex password immediately. Also, ensure that your Kaseya Unitrends Backup Appliance is updated to version 10.5.5 or later where possible to maintain overall security. You've got this! Take these steps, and you'll be well on your way to fortifying your defenses. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01923 · 79.8th percentile
Published
2021-12-06T00:00Z
EPSS history
Timeline
  • 06 DEC 00:00Z
    An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5
    cvelistv5