CISA known exploited vulnerability

CVE-2021-30116

Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

SOURCE FACT

Kaseya · Virtual System/Server Administrator (VSA)

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30116

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2021-30116

Kaseya · Virtual System/Server Administrator (VSA)

Required action

CISA notes

Could this product be present?