Cybersecurity Alerts

Kaseya VSA SQL Injection Vulnerability

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

Required Action

The impacted product is end-of-life and should be disconnected if still in use.

Weakness Classification

CWE-89

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-18362