critical9.8
CVE-2024-28222
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated atta…
Impact
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veritas | Netbackup | before 8.1.2 |
| Veritas | Netbackup Appliance | before 3.1.2 |