What’s Vulnerable › Vulnerabilities

CVE-2020-15851

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-09-24 · updated 2026-06-17
• Weakness: CWE-306

Description

Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories.

Affected products

• NAKIVO Backup & Replication Transporter: 9.4.0.r43656

References

• https://helpcenter.nakivo.com/display/RN/v10.3+Release+Notes
• https://labs.f-secure.com/advisories/nakivo-backup-and-replication-multiple-vulnerabilities
• https://helpcenter.nakivo.com/display/RN/v10.3+Release+Notes
• https://labs.f-secure.com/advisories/nakivo-backup-and-replication-multiple-vulnerabilities

Get alerted when CVE-2020-15851 or the next vulnerability affects your stack