Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: bareos Clear all filters
TI-2022-08569 CVE-2022-24755

Incorrect Authorization in Bareos Director

Priority HIGH 76

Bareos is open source software for backup, archiving, and recovery of data for operating systems.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02018 Published 2022-03-15 Fixed in 19.2.12, 20.0.6 +1 CWE-863
TI-2020-03531 CVE-2020-4042

Authentication bypass in Bareos

Priority LOW 32

Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allows client initiated connection and connects to the client its…

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00971 Published 2020-07-10 Fixed in 19.2.8 CWE-294
TI-2020-08935 CVE-2020-11061

Heap-based Buffer Overflow in Bareos Director

Priority LOW 35

In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify…

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.0124 Published 2020-07-10 No fix listed CWE-122