HTTP: Bacula-Web PHP SQL Injection
This signature detects attempts to exploit a known vulnerability against Bacula Web. A successful attack can lead to privilege escalation.
Extended Description
Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.
Affected Products
Bacula bacula-web
Short Name
HTTP:SQL:INJ:BACULA-WEB-SQL-INJ
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Bacula-Web CVE-2017-15367 Injection PHP SQL
Release Date
11/11/2019
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3603
False Positive
Unknown
Vendors
Bacula
CVSS Score
7.5