NetSight
high8.0

CVE-2022-36988

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBa…

Impact

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup OpsCenter server, NetBackup Primary server, or NetBackup Media server could remotely execute arbitrary commands on a NetBackup Primary server or NetBackup Media server.

Affected products

VendorProductAffected versions
VeritasFlex Appliance
Versions 1.2, 1.3, 2.0, 2.0.1, 2.0.2, 2.1
VeritasFlex Scale
Versions 1.3.1, 2.1
VeritasNetbackup
Versions 8.1.1, 8.1.2, 8.2, 8.3, 8.3.0.1, 8.3.0.2
VeritasNetbackup Appliance
Versions 3.1.1, 3.1.2, 3.2, 4.0, 4.1, 3.3.0.1

References