2020-02-17 14:56:51
mitre
PUBLISHED
In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass.