An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). Under certain conditions, an attacker with authenticated access to a NetBackup Client could remotely read files on a NetBackup Primary server.
References
Link | Resource |
---|---|
https://www.veritas.com/content/support/en_US/security/VTS22-004#m2 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Aug 2022, 15:21
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
CWE | NVD-CWE-noinfo | |
CPE | cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release1:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup_appliance:3.1.1:*:*:*:*:*:*:* cpe:2.3:a:veritas:flex_appliance:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:8.3.0.1:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release1:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:8.2:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release1:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup_appliance:4.0:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release2:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release2:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:9.0:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:9.1.0.1:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release1:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release3:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup_appliance:3.2:*:*:*:*:*:*:* cpe:2.3:a:veritas:flex_appliance:1.3:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release2:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:8.1.2:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup_appliance:4.1:*:*:*:*:*:*:* cpe:2.3:a:veritas:flex_appliance:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:8.3.0.2:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release2:*:*:*:*:*:* cpe:2.3:a:veritas:flex_scale:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:9.1:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release1:*:*:*:*:*:* cpe:2.3:a:veritas:flex_scale:2.1:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release2:*:*:*:*:*:* cpe:2.3:a:veritas:flex_appliance:2.0:*:*:*:*:*:*:* cpe:2.3:a:veritas:flex_appliance:1.2:*:*:*:*:*:*:* cpe:2.3:a:veritas:flex_appliance:2.1:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:9.0.0.1:*:*:*:*:*:*:* cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release3:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup_appliance:3.1.2:*:*:*:*:*:*:* cpe:2.3:a:veritas:netbackup:8.3:*:*:*:*:*:*:* |
|
References | (MISC) https://www.veritas.com/content/support/en_US/security/VTS22-004#m2 - Patch, Vendor Advisory |
28 Jul 2022, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-07-28 01:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-36999
Mitre link : CVE-2022-36999
CVE.ORG link : CVE-2022-36999
JSON object : View
Products Affected
veritas
- flex_scale
- netbackup
- flex_appliance
- netbackup_appliance
CWE