CVE-2019-25608 - Vulnerability Analysis

Overview

Iperius Backup 6.1.0 contains a privilege escalation vulnerability caused by the ability to create backup jobs that execute arbitrary programs with elevated privileges, letting low-privilege users escalate privileges and execute code, exploit requires low-privilege user access.

Severity & Score

Impact

Low-privilege users can execute arbitrary code with elevated privileges, potentially leading to full system compromise.

Mitigation

Update to the latest version of Iperius Backup.

References

• https://www.iperiusbackup.com/download.aspx
• https://www.vulncheck.com/advisories/iperius-backup-privilege-escalation-via-backup-job
• https://www.exploit-db.com/exploits/46863
• https://www.iperiusbackup.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner