Description
A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents of the backup archive to create or overwrite arbitrary files anywhere on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MBS | UBR-01 Mk II | 0.0.0 – < 6.0.1.0 | 6.0.1.0 |
| MBS | UBR-02 | 0.0.0 – < 6.0.1.0 | 6.0.1.0 |
| MBS | UBR-LON | 0.0.0 – < 6.0.1.0 | 6.0.1.0 |