CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-07-09
Kaseya VSA Credential Disclosure and Authentication Bypass Vulnerability (CVE-2021-30116) Security Advisory
[Affected Scope] Kaseya VSA on-premise installations prior to version 9.5.7
[Impact] Attackers can extract agent credentials to obtain a valid session ID, bypassing authentication to gain unauthorized control over the system
[Mitigation] Immediately upgrade Kaseya VSA to version 9.5.7 or higher, and restrict external access to the dl.asp page