Skip to content
OpenAdvisories

Vendor

bareos

4 known vulnerabilities.

Products

bareos 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2024-45044

    Bareos's negative command ACLs can be circumvented by abbreviating commands

    Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. "w" for "whoami") the ACL check did not apply to the full fo…

    bareos bareos bareos Ubuntu
  • High 7.5
    CVE-2022-24756

    Missing Release of Memory after Effective Lifetime in Bareos Director

    Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, a failed PAM authentication will leak a sma…

    bareos bareos bareos Ubuntu
  • High 8.1
    CVE-2022-24755

    Incorrect Authorization in Bareos Director

    Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 >= 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, it will skip authorization checks c…

    bareos bareos bareos Ubuntu