Directory Traversal Vulnerability in Arcserve UDP by CA Technologies
CVE-2015-4068

9.1CRITICAL

Key Information:

Vendor: Arcserve
Status: Arcserve Unified Data Protection
Vendor: CVE Published:; 29 May 2015

Badges

👾 Exploit Exists🟣 EPSS 81%🦅 CISA Reported

What is CVE-2015-4068?

A directory traversal vulnerability exists in Arcserve UDP prior to version 5.0 Update 4, allowing remote attackers to manipulate file paths. By crafting specific requests to the reportFileServlet or exportServlet servlets, attackers can access sensitive information or potentially lead to a denial of service. This vulnerability emphasizes the importance of secure coding practices to prevent unauthorized filesystem access.

CISA has reported CVE-2015-4068

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2015-4068 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch