cve/2015/CVE-2015-2862.md

### [CVE-2015-2862](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2862)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.

### POC

#### Reference
- http://www.kb.cert.org/vuls/id/919604

#### Github
No PoCs found on GitHub currently.