NetSight
high8.6

CVE-2022-36986

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBa…

Impact

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with unauthenticated access could remotely execute arbitrary commands on a NetBackup Primary server.

Affected products

VendorProductAffected versions
VeritasFlex Appliance
Versions 1.2, 1.3, 2.0, 2.0.1, 2.0.2, 2.1
VeritasFlex Scale
Versions 1.3.1, 2.1
VeritasNetbackup
Versions 8.1.1, 8.1.2, 8.2, 8.3, 8.3.0.1, 8.3.0.2
VeritasNetbackup Appliance
Versions 3.1.1, 3.1.2, 3.2, 4.0, 4.1, 3.3.0.1

References