high8.8
CVE-2019-14418
An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1.
Impact
An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulnerability allows a VRP user with sufficient privileges to overwrite any file in the VRP virtual machine. A malicious VRP user could use this to replace existing files to take control of the VRP virtual machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veritas | Resiliency Platform | Versions 1.2, 2.0, 2.1, 2.2, 3.0, 3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
- http://seclists.org/fulldisclosure/2019/Jul/39
- https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue1
- http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html
- http://seclists.org/fulldisclosure/2019/Jul/39
- https://www.veritas.com/content/support/en_US/security/VTS19-002.html#Issue1