Quest NetVault Backup up to 11.2.0.12 Request improper authorization

Summaryinfo

A vulnerability was found in Quest NetVault Backup up to 11.2.0.12. It has been rated as problematic. The impacted element is an unknown function. Performing a manipulation as part of Request results in improper authorization. This vulnerability was named CVE-2018-1162. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Quest NetVault Backup up to 11.2.0.12 (Backup Software). This affects an unknown function. The manipulation as part of a Request leads to a improper authorization vulnerability. CWE is classifying the issue as CWE-285. The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. This is going to have an impact on availability. The summary by CVE is:

This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2.0.13. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within the handling of Export requests. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to arbitrarily overwrite files resulting in a denial-of-service condition. Was ZDI-CAN-4222.

The bug was discovered 01/03/2018. The weakness was presented 02/08/2018 (Website). It is possible to read the advisory at zerodayinitiative.com. This vulnerability is uniquely identified as CVE-2018-1162 since 12/05/2017. The exploitability is told to be easy. It is possible to initiate the attack remotely. The successful exploitation requires a authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1548.002 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 36 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 11.2.0.13 eliminates this vulnerability.

See VDB-113044 and VDB-113042 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Backup Software

Vendor

• Quest

Name

• NetVault Backup

Version

• 11.2.0.0
• 11.2.0.1
• 11.2.0.2
• 11.2.0.3
• 11.2.0.4
• 11.2.0.5
• 11.2.0.6
• 11.2.0.7
• 11.2.0.8
• 11.2.0.9
• 11.2.0.10
• 11.2.0.11
• 11.2.0.12

License

• commercial

Website

• Vendor: https://www.quest.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion