Umbra Wiki cve cve/CVE-2021-30116
Back to wiki

CVE-2021-30116 — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

provenance: imported · CVE: CVE-2021-30116 · CWE: CWE-522

CVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Kaseya
Product Virtual System/Server Administrator (VSA)
Date added 2021-11-03
Due date 2021-11-17
Ransomware campaign use Known

Description

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30116

Weakness behind it

CISA records this vulnerability as an instance of CWE-522. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-30116
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →