The EdgeServiceImpl web service in Arcserve UDP prior to 5.0 Update 4 allows remote malicious users to obtain sensitive credentials via a crafted SOAP request to the (1) getBackupPolicy or (2) getBackupPolicies method.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
arcserve arcserve unified data protection |