Exposure of Backup File to an Unauthorized Control Sphere
CWE-530
A backup file is stored in a directory or archive that is made accessible to unauthorized actors.
We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9.
How this weakness is prevented
- Policy: Recommendations include implementing a security policy within your organization that prohibits backing up web application source code in the webroot.
Latest Exposure of Backup File to an Unauthorized Control Sphere vulnerabilities
- 8.8 High severity
QRadar: Files or Directories Accessible to External Parties
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain access to the underlying operating system.
- 7.5 High severity
WP Database Backup – Unlimited Database &…: Exposure of Backup File to an Unauthorized Control Sphere
The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up files. This makes it possible for unauthe
- 7.5 High severity
RockOA: Files or Directories Accessible to External Parties
A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possibl