{"cvss":10.0,"datePublished":"2021-11-03","dateUpdated":"2021-11-03","description":"Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.","dueDate":"2021-11-17","id":"CVE-2021-30116","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30116","product":"Virtual System/Server Administrator (VSA)","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","vendor":"Kaseya"}