1. Home
  2. CVE Database
  3. CVE-2019-15720
HIGH · 7.8

CVE-2019-15720

CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that ex...

Vulnerability Description

CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that executes on behalf of NT AUTHORITY\SYSTEM.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CloudberrylabBackup<= 6.1.2.34

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2019-15720?

CVE-2019-15720 is a vulnerability with a CVSS score of 7.8 (HIGH). CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that ex...

How severe is CVE-2019-15720?

CVE-2019-15720 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-15720?

Check the references section above for vendor advisories and patch information. Affected products include: Cloudberrylab Backup.