Vulnerabilities > CVE-2021-30121 - Inclusion of Functionality from Untrusted Control Sphere vulnerability in Kaseya VSA
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request: `https://x.x.x.x/KLC/js/Kaseya.SB.JS/js.aspx?path=C:\Kaseya\WebPages\dl.asp` A valid sessionId is required but can be easily obtained via CVE-2021-30118
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |