As cited
Copy frozen at (site build).
vulnerabilities
ConnectWise/R1Soft RCE & Supply Chain Risks | Huntress
Huntress confirmed an authentication bypass and sensitive file disclosure vulnerability in the ZK Java framework used by ConnectWise R1Soft Server Backup Manager SE. The flaw allows unauthorized access and exposure of sensitive data in the backup management software. This represents a supply chain security risk affecting organizations relying on this widely used backup solution.
Why it matters: Organizations running R1Soft Server Backup Manager SE face potential compromise of their backup infrastructure and exposure of sensitive data; practitioners should immediately verify if they are affected and apply available mitigations or patches.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
ConnectWise/R1Soft RCE & Supply Chain Risks | Huntress
Huntress confirmed an authentication bypass and sensitive file disclosure vulnerability in the ZK Java framework used by ConnectWise R1Soft Server Backup Manager SE. The flaw allows unauthorized access and exposure of sensitive data in the backup management software. This represents a supply chain security risk affecting organizations relying on this widely used backup solution.
Why it matters: Organizations running R1Soft Server Backup Manager SE face potential compromise of their backup infrastructure and exposure of sensitive data; practitioners should immediately verify if they are affected and apply available mitigations or patches.
- Source published
- First seen by Cybersecurity Tracker