In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.
References
Link | Resource |
---|---|
https://www.veritas.com/content/support/en_US/security/VTS22-009#Issue6 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Aug 2022, 10:54
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.veritas.com/content/support/en_US/security/VTS22-009#Issue6 - Vendor Advisory | |
CWE | CWE-798 | |
CPE | cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:9.0:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:9.1.0.0:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
27 Jul 2022, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-07-27 21:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-36952
Mitre link : CVE-2022-36952
CVE.ORG link : CVE-2022-36952
JSON object : View
Products Affected
veritas
- netbackup
CWE
CWE-798
Use of Hard-coded Credentials