webERP 4.15.1 - Unauthenticated Backup File Access
Vulnerability Description
webERP 4.15.1 contains an unauthenticated file access vulnerability that allows remote attackers to download database backup files without authentication. Attackers can directly access generated backup files in the companies/weberp/ directory by requesting the Backup_[timestamp].sql.gz file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-37082
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Besim ALTINOK
Affected Vendor
Weberp
View all reports →