Missing privilege checks when configuring scheduled tape backup jobs
Affected packages
proxmox-backup-server
Details
A user with sufficient privileges to set up a tape backup job could reference any datastore or tape media pool/drive in the created job config.
This issue was reported privately by Project Loupe.
Fixed in
- proxmox-backup-server >= 4.2.7-1
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.