CVE

CVE-2021-30116

P1⬤ KNOWN RANSOMWARE USE

Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)

Date added (CISA)

2021-11-03

Remediation due

2021-11-17

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

Source: NVD ↗ · CISA KEV Catalog ↗