MSP360 Backup (for Linux) Insecure Filesystem Permissions Vulnerability

A vulnerability exists in MSP360 Backup version 4.3.1.115 for Linux, where insecure file system permissions allow a low-privileged user to execute commands with root privileges in the 'Online Backup' directory. This vulnerability can be exploited to gain elevated privileges, potentially leading to unauthorized access or modification of backup data.

Impact

Exploitation of this vulnerability allows low-privileged users to execute commands with root privileges, which could be used to manipulate backup processes or access sensitive data.

Remediation

Users are advised to upgrade to MSP360 Backup version 4.4, which addresses this vulnerability.