CVE ID
CVE-2017-7282
DESCRIPTION
An issue in api/includes/restore.php allowed a Local File Inclusion when specifying a filename manually.
RESOLUTION
Unitrends Risk Assessment: None.
Resolved with latest security update as of 04/14/2017.
CVE-2017-7282: Unitrends LFI in restore.php filename
Have more questions?
Was this article helpful?
Provide feedback for the Documentation team!
Browse this section
- Release Notes for Recovery Series, Recovery Max, ION/ION+, and Unitrends Backup 10.8.3
- Unitrends Documentation
- Unitrends Video Tutorials - Reference Article
- Release Notes for Recovery Series, Recovery Max, ION/ION+, and Unitrends Backup 10.8.4
- Release Notes for Recovery Series, Recovery Max, ION/ION+, and Unitrends Backup 10.8.2
- Release Notes for Recovery Series, Recovery Max, ION/ION+, and Unitrends Backup 10.8.1
- Release Notes for Recovery Series, Recovery Max, ION/ION+, and Unitrends Backup 10.8.0
- How to disable the console menu (dpuconfig) on a Unitrends appliance (CentOS7)
- [VIDEO] IT Glue - Unitrends Disaster Recovery Runbook
- Release Notes for Recovery Series, Recovery Max, ION/ION+, and Unitrends Backup 10.7.11
- See more