What’s Vulnerable › Vulnerabilities

CVE-2020-15850

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-24 · updated 2026-06-17
• Weakness: CWE-276

Description

Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containing the users of the web application and the password-recovery secret value is readable.

Affected products

• NAKIVO Backup & Replication Director: 9.4.0.r43656

References

• https://helpcenter.nakivo.com/display/RN/v10.3+Release+Notes
• https://labs.f-secure.com/advisories/nakivo-backup-and-replication-multiple-vulnerabilities
• https://helpcenter.nakivo.com/display/RN/v10.3+Release+Notes
• https://labs.f-secure.com/advisories/nakivo-backup-and-replication-multiple-vulnerabilities

Get alerted when CVE-2020-15850 or the next vulnerability affects your stack