Idera Server Backup Manager (R1Soft) – Session Fixation Vulnerability

October 29, 2014 - by RACK911 Labs

Product Description:

Idera Server Backup Manager is an affordable, high-performance, disk-to-disk backup software for Linux and Windows servers. (This software was previously more commonly known as R1Soft Backup.)

Vulnerability Discussion:

It is possible for a malicious user to clone an authenticated user / admin session which could result in unauthorized access.

Vendor Contact Timeline:

2014-09-10: Vendor contacted via email.
2014-09-10: Vendor confirms vulnerability.
2014-10-27: Vendor issues update.
2014-10-29: RACK911 Labs issues security advisory.

About Us:

https://www.RACK911Labs.com

RACK911 Labs
1110 Palms Airport Drive, Suite 110
Las Vegas, NV 89119

1-855-RACK911