high7.8
CVE-2022-36985
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBa…
Impact
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veritas | Flex Appliance | Versions 1.2, 1.3, 2.0, 2.0.1, 2.0.2, 2.1 |
| Veritas | Flex Scale | Versions 1.3.1, 2.1 |
| Veritas | Netbackup | Versions 8.1.1, 8.1.2, 8.2, 8.3, 8.3.0.1, 8.3.0.2 |
| Veritas | Netbackup Appliance | Versions 3.1.1, 3.1.2, 3.2, 4.0, 4.1, 3.3.0.1 |