ConnectWise/R1Soft RCE & Supply Chain Risks | Huntress

T1Covered by 1 source · first reported by Huntress at 31 Oct 2022, 00:00 UTC

Huntress has validated an initial report for an authentication bypass and sensitive file leak present in the Java framework “ZK”, used within the ConnectWise R1Soft software Server Backup Manager SE.