Kaseya Virtual System Administrator Remote Privilege Escalation Vulnerability
Vulnerability Details
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Kaseya Virtual System Administrator. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the forwarding service's handing of the setAccount.aspx page, which does not properly enforce that users be authenticated before manipulating user accounts. Attackers can use this vulnerability to become "Master Admin" in the application and execute arbitrary code on all managed devices.
Additional Details
Kaseya has issued an update to correct this vulnerability. More details can be found at:
https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-Advisory
Disclosure Timeline
- 2015-04-02 - Vulnerability reported to vendor
- 2015-09-23 - Coordinated public release of advisory
Credit
Pedro Ribeiro (pedrib@gmail.com) / Agile Information Security
