TI-2022-08569 CVE-2022-24755
Incorrect Authorization in Bareos Director
Priority HIGH 76
Bareos is open source software for backup, archiving, and recovery of data for operating systems.
bareos
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
bareos records in CISA KEVNo bareos vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
Priority HIGH 72
Bareos is open source software for backup, archiving, and recovery of data for operating systems.
TI-2024-30156 CVE-2024-45044
Bareos's negative command ACLs can be circumvented by abbreviating commands
Priority MEDIUM 41
Bareos is open source software for backup, archiving, and recovery of data for operating systems.
TI-2020-08935 CVE-2020-11061
Heap-based Buffer Overflow in Bareos Director
Priority LOW 35
In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify…
TI-2017-10707 CVE-2017-14610
bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a…
Priority LOW 34
bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging…
TI-2020-03531 CVE-2020-4042
Authentication bypass in Bareos
Priority LOW 32
Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allows client initiated connection and connects to the client its…