Description
An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 (released on 2025-04-22).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MSP360 | Backup | 4.3.1.115 | 4.4 |
Advisories 1
- VA-25-119-01 MSP360 Backup insecure filesystem permissions CISA ICS & IT advisories · May 19, 2025