CyberSecBulletin

Bareos vulnerabilities

We track 3 vulnerabilities in Bareos products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2024.

3vulnerabilities
1critical
2high
0exploited
8.7average CVSS score

Latest Bareos vulnerabilities

  • 8.8 High severity

    bareos: Improper Authorization

    CVE-2024-45044Bareos

    Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation (i.e. "w" for "whoami") the ACL check did not apply to the full for

  • 7.5 High severity

    bareos: Missing Release of Memory after Effective Lifetime

    CVE-2022-24756BareosEPSS 1.93%

    Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, a failed PAM authentication will leak a smal

  • 9.8 Critical severity

    bareos: Incorrect Authorization

    CVE-2022-24755BareosEPSS 2.02%

    Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 >= 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, it will skip authorization checks co