Description
Arcserve Unified Data Protection是Arcserve公司的一体化数据和勒索软件保护解决方案。Arcserve Unified Data Protection存在目录遍历漏洞，此漏洞是由于importNode接口对用户的请求验证不当导致的。
Arcserve Unified Data Protection CVE-2024-0800 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-0800
https://www.tenable.com/security/research/tra-2024-07
https://digital.nhs.uk/cyber-alerts/2024/cc-4487
https://github.com/advisories/GHSA-2473-36w3-q5h4
https://www.helpnetsecurity.com/2024/03/14/cve-2024-0799-cve-2024-0800/
https://support.arcserve.com/s/article/Critical-vulnerability-alert-Arcserve-Unified-Data-Protection-UDP-Security-Fix-update-CVE-2024-0799-CVE-2024-0800-CVE-2024-0801?language=en_US
https://beyondmachines.net/event_details/arcserve-unified-data-protection-fixes-critical-vulnerabilities-v-y-b-t-g
https://fortiguard.fortinet.com/encyclopedia/ips/55247
https://feedly.com/cve/CVE-2024-0800
https://soc.cyber.wa.gov.au/advisories/20240318001-Arcserve-Critical-Vulnerabilities/