high8.8
CVE-2017-6406
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.
Impact
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veritas | Access | through 7.2.1 |
| Veritas | Netbackup | through 7.7.1 |
| Veritas | Netbackup Appliance | through 2.7.1 |