All Huntress Blog Posts

All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Chris Bisnett
Rapid Response & Vulnerabilities
CVE-2017-18362: Arbitrary SQL Execution in ManagedITSync Integration
CVE-2017-18362: Arbitrary SQL Execution in ManagedITSync Integration

A vulnerability in the ConnectWise ManagedITSync integration lets remote attackers run arbitrary SQL against the Kaseya VSA database, including creating admin users. Here's the full technical disclosure.

February 8, 2019