Path Traversal Schwachstelle in WBSAirback

The Path Traversal vulnerability in WBSAirback allows an attacker with low privileges to bypass access controls and retrieve arbitrary files from the server. This could include configuration files, database backups, or other sensitive data. Successful exploitation could lead to data breaches, compromise of system credentials, and potential lateral movement within the network if the downloaded files contain sensitive information or access keys. While the vulnerability requires low privileges to exploit, the potential impact can be significant depending on the data accessible through the traversal.

Organizations utilizing WBSAirback version 21.02.04, particularly those with limited access controls or those storing sensitive data on the server, are at risk. Shared hosting environments where multiple users have access to the WBSAirback instance are also particularly vulnerable.

1. 2024-04-15Disclosure

   disclosure

1. Reserviert2024-04-15
2. Veröffentlicht2024-04-15
3. Geändert2024-08-01
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-3783 is to upgrade WBSAirback to a patched version as soon as it becomes available. Until a patch is released, consider implementing temporary workarounds such as restricting file access permissions for the Backup Agents section. Review and harden existing access controls to minimize the potential impact of a successful exploit. Monitor system logs for any unusual file access patterns that could indicate exploitation attempts.